Senior Vendor Risk Analyst

About the role

SentinelOne is seeking a Senior Risk Analyst focused on Vendor Risk Assessment to join its Information Security GRC team. You will apply deep technical knowledge to evaluate the security posture of a diverse vendor portfolio, moving beyond questionnaire responses to deliver credible, risk‑based insights.

Key responsibilities

• Conduct end‑to‑end vendor assessments, reviewing SOC 2 reports, penetration test findings, vulnerability disclosures, network diagrams, encryption practices, and access‑control configurations.
• Identify technical control gaps and translate them into prioritized remediation plans.
• Interpret vendor documentation such as system architecture diagrams, data‑flow maps, hardening standards, patch‑management processes, and incident‑response capabilities.
• Map vendor controls to frameworks including ISO 27001, SSAE 18/SOC 2, SOX ITGC, GDPR, NIST CSF, and NIST SP 800‑53.
• Operate independently on assigned workstreams while collaborating with cross‑functional security teams.

Required profile

• Several years of hands‑on experience in IT and cybersecurity risk assessment.
• Strong analytical mindset with the ability to evaluate complex technical environments (cloud, SaaS, on‑prem, hybrid).
• Excellent written and verbal communication skills for translating technical findings into business‑focused recommendations.

Required skills

• SOC 2 assessment
• Penetration testing and vulnerability assessment
• Network architecture analysis
• Encryption and access‑control knowledge
• ISO 27001
• SSAE 18 / SOC 2
• SOX ITGC
• GDPR compliance
• NIST CSF
• NIST SP 800‑53