Vendor Compliance Analyst II

About AlphaSense:

The worlds most sophisticated companies rely on AlphaSense to remove uncertainty from decisionmaking. With market intelligence and search built on proven AI AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research company filings event transcripts expert calls news trade journals and clients own research content.

The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AIdriven market intelligence. Together AlphaSense and Tegus will accelerate growth innovation and content expansion with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 4000 enterprise customers including a majority of the S&P 500. Founded in 2011 AlphaSense is headquartered in New York City with more than 2000 employees across the globe and offices in the U.S. U.K. Finland India Singapore Canada and Ireland. Come join us!

About AlphaSense:

The worlds most sophisticated companies rely on AlphaSense to remove uncertainty from decisionmaking. With market intelligence and search built on proven AI AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research company filings event transcripts expert calls news trade journals and clients own research content. Our platform is trusted by over 4000 enterprise customers including a majority of the S&P 500.

Founded in 2011 AlphaSense is headquartered in New York City with over 2300 people across the globe and offices in the U.S. U.K. Finland India and Singapore. For more information please visit www.alphasense.

About the Role:

The Vendor Compliance Analyst II must be a highly motivated selfstarter with a vendor management and IT background. The position will be focused on governance risk and compliance focusing on reducing risk reviewing and improving controls and maintaining compliance with industry standard information security frameworks.

As a member of the AlphaSense Information Security team you will ensure that the confidentiality availability and integrity of all information and information systems within AlphaSense environments is always protected. This will primarily be achieved through identification and recommendation of risk mitigation treatment plans implementing new or enhancing physical technical administrative controls to support the needs of AlphaSense and its customers. Must be aware of and comply with all aspects of the AlphaSense Information Security Program and the policies contained therein. Must always understand the importance of maintaining Information Security.

Key Responsibilities:

• Conduct questionnairebased assessments to evaluate vendors cybersecurity practices
• Analyze assessment results and provide detailed risk reports to stakeholders
• Collaborate with internal teams to remediate identified risks
• Prepare and report on key metrics to measure the effectiveness of the TPRM program
• Develop dashboards and reports to communicate TPRM performance to leadership
• Stay current with industry trends regulations and best practices in cybersecurity and thirdparty risk management
• Lead the design and implementation of TPRM operating models identifying evaluating and providing solutions to evaluate complex business and technology risks
• Maintain compliance with SOC2 and ISO 27001 certifications
• In conjunction with the Information Security Manager work to continually improve the AlphaSense Information Security Program
• Assist with the development review and alignment of Information Security Policies and associated standards
• Work with various team members to develop standard operating procedures (SOPs)
• Gather and review information security metrics
• Enforce Information Security policies and IT procedures; report any suspected policy violations
• Maintain vendor management program and conduct assessments as required
• Develop expertise to implement and train staff on new security technologies
• Develop relationships within the team and across departments to encourage cooperation communication and respect
• Support risk management program including assessment treatment and reporting
• Identify and highlight vulnerabilities that may impact the confidentiality integrity or availability of AlphaSense systems or information
• Act as a supporting member of the Incident Response team (IRT) and Business Continuity Program
• Facilitate a process of continuous improvement opportunities
• Participate in audits and engage with auditors as required

Requirements:

• 1 to 2 years of demonstrated experience with Risk Management across the ThirdParty engagement lifecycle (precontracting contracting and post contracting) and an understanding of the associated organizational infrastructure (e.g. relevant internal controls business processes governance structures)
• Strong understanding of the TPRM framework Risk Management Information Security practices
• Demonstrate a good understanding of the Contract Risk Review management process
• Handson exposure to TPRM tools and technology solutions (e.g. GRC enablement solutions such as Process Unity Prevalent Archer ServiceNow Drata etc.
• Demonstrated knowledge of standards such as ISO 27001/2 SOC2 TYPE 2 etc
• Must maintain a clean and presentable appearance and work environment for video calls
• Outstanding proficiency in both verbal and written communication
• Customer service orientation (e.g. patience positive customerfriendly attitude active listening empathy professionalism etc.
• Strong attention to detail
• Ability to manage multiple responsibilities and competing priorities constantly reprioritizing based on new information or shifting deadlines
• Strong desire to learn new technologies frameworks and standards
• Maintain current skills and strive to acquire new knowledge based on current industry trends
• Highly motivated selfstarter & independent worker who can produce high level results consistently with minimal supervision
• Must work well in a team environment and participate in working meetings over Zoom (or equivalent)
• Capable of analyzing data to evaluate risk and compliance

Education:

• Bachelors degree or equivalent years of industry experience
• Security Certifications a plus
• Governance Risk and Compliance (GRC) experience a plus

Please note this job description is not designed to cover or contain a comprehensive listing of activities duties or responsibilities that are required of the employee for this job. Duties responsibilities and activities may change at any time with or without notice.

AlphaSense is an equalopportunity employer. We are committed to a work environment that supports inspires and respects all individuals. All employees share in the responsibility for fulfilling AlphaSenses commitment to equal employment opportunity. AlphaSense does not discriminate against any employee or applicant on the basis of race color sex (including pregnancy) national origin age religion marital status sexual orientation gender identity gender expression military or veteran status disability or any other nonmerit factor. This policy applies to every aspect of employment at AlphaSense including recruitment hiring training advancement and termination.

In addition it is the policy of AlphaSense to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws regulations and ordinances where a particular employee works

AlphaSense is an equalopportunity employer. We are committed to a work environment that supports inspires and respects all individuals. All employees share in the responsibility for fulfilling AlphaSenses commitment to equal employment opportunity. AlphaSense does not discriminate against any employee or applicant on the basis of race color sex (including pregnancy) national origin age religion marital status sexual orientation gender identity gender expression military or veteran status disability or any other nonmerit factor. This policy applies to every aspect of employment at AlphaSense including recruitment hiring training advancement and termination.

In addition it is the policy of AlphaSense to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws regulations and ordinances where a particular employee works.

Recruiting Scams and Fraud

We at AlphaSense have been made aware of fraudulent job postings and individuals impersonating AlphaSense recruiters. These scams may involve fake job offers requests for sensitive personal information or demands for payment. Please note:

• AlphaSense never asks candidates to pay for job applications equipment or training.
• All official communications will come from an @alphasense.comemail address.
• If youre unsure about a job posting or recruiter verify it on ourCareers page.

If you believe youve been targeted by a scam or have any doubts regarding the authenticity of any job listing purportedly from or on behalf of AlphaSense pleasecontact us. Your security and trust matter to us.