{"id":186974,"url":"https://alion.io/job/hogan-lovells-vendor-security-analyst","title":"Vendor Security Analyst","company":{"id":452177,"name":"Hogan Lovells","domain":"hoganlovells.com","url":"https://alion.io/company/hogan-lovells","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":{"grade":"B","score":84,"open_postings":20,"ghost_share":0,"stale_share":0.45,"repost_share":0,"time_to_fill_p50_days":61,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Louisville, United States","Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120500,"max":146200,"currency":"USD","period":"year","gross":null,"usd_annual":146200},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-08-31T00:00:00Z","employer_posted_date":"2026-08-31","last_verified_at":"2026-08-31T00:00:00Z","board_verified":false,"closed_at":null,"days_open":60,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":60},"description":"Hogan Lovells Cadwalader delivers decisive counsel at the intersection of finance, business, and regulation, helping clients succeed when it matters most. We are a leading global law firm trusted to advise on complex, high stakes matters, combining global scale with local intelligence to help clients move markets, shape industries, define new opportunities, and succeed. With more than 3,100 lawyers worldwide, we bring sharp thinking, deep commercial understanding, and an uncompromising commitment to delivering exceptional outcomes for clients.\nThe Vendor Security Analyst performs evaluation of third party and vendor engagements to identify and manage vendor risk which may include completion of risk assessments. They will also conduct the technical security reviews of our suppliers and partners. This role reports to the Head of Information Risk.\nKEY RESPONSIBILITIES\nEvaluate third party risk and steer vendor relationships\nEvaluate vendor responses to security questionnaires\nMake recommendations on ways to mitigate vendor risk\nMaintain vendor risk repository of artifacts including regular third party vendor certifications and assign risk scores to firm suppliers and partners\nConduct onsite audits of high risk vendors reviewing security and controls\nActively support and engage in the firm's Responsible Business initiatives, contributing to our commitments to our people, clients, communities, and the environment.\nProvide support on emerging priorities and undertake additional responsibilities as needed to meet evolving business requirements.\nQUALIFICATIONS\nEDUCATION & EXPERIENCE\nStrong and demonstration information security risk identification (including Cloud services), assessment, and risk ranking experience\nWorking experience with the following documents used in a risk assessment preferred:\nSIG (Standardized Information Gathering) questionnaire\nPenetration test\nVulnerability test\nSOC (Service Organization Control) 1 and 2, Type 2\nISO 27001\nBachelor's degree preferred.\nSKILLS & ABILITIES\nPossess a sufficient understanding of technical concepts including systems, networks, and security architecture best practices in order to effectively evaluate risk and assess the effectiveness of controls\nConfident to make independent decisions\nAbility to explain technical concepts in layman terms\nAbility to interact effectively and influence external vendors\nKeen attention to detail and accuracy in order to analyze documents\nBroad knowledge of risk management, vulnerability management, and third party risk\nWORK SCHEDULES/HOURS EXPECTATION\nCore hours are generally Monday through Friday, 9:00 a.m. to 5:30 p.m., including an unpaid meal period. This position is based on a standard 37.5-hour workweek. Additional or adjusted hours may be required to meet business needs and must be worked in accordance with applicable overtime requirements and firm policies.\nIn Washington, D.C., the expected base salary range for this role is $120,500 to $146,200per year.\nThis range reflects a good-faith estimate of pay at the time of posting; the actual compensation offered may vary depending on factors such as the candidate’s qualifications. This position is eligible for additional forms of compensation, which may include annual discretionary bonuses. Employees in this role are also eligible for benefits offered by the firm, subject to applicable plan terms and conditions, which currently include medical, dental, and vision insurance; a 401(k)-retirement plan; and paid time off. Please review this link for more information regarding employee benefits in the United States.\nThis job description sets forth the responsibilities of this position and may be changed from time to time as shall be determined.\nHogan Lovells Cadwalader is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, age, national origin, disability, sexual orientation, gender identity or expression, marital status, genetic information, protected Veteran status, or other factors protected by law.\nHogan Lovells Cadwalader complies with federal and state disability laws and makes reasonable accommodations for applicants and candidates with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, please contact our Benefits Department at .","description_format":"text","description_chars":4422,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Retirement plans","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Wholesale","Bicycles & Cycling"],"lifecycle":[{"event":"open","at":"2026-09-01T19:53:52Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.643,"p_room":0.6,"age_days":60,"expected_fill_days":61,"reasons":["seen:60","win:late","crowd:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":146200,"is_top_pay":false},"html_url":"https://alion.io/job/hogan-lovells-vendor-security-analyst","json_url":"https://alion.io/job/hogan-lovells-vendor-security-analyst.json","meta":{"generated_at":"2026-10-30T17:25:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5913,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":452177},"rest":"https://alion.io/mcp/rest/get_company?id=452177"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhogan-lovells-vendor-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhogan-lovells-vendor-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhogan-lovells-vendor-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hogan-lovells-vendor-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhogan-lovells-vendor-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":186974}},{"tool":"search_jobs","arguments":{"company":"hoganlovells.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":186974},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}