{"id":3597822,"url":"https://alion.io/job/lyra-information-security-advisor","title":"Information Security Advisor","company":{"id":678790,"name":"LYRA","domain":"lyratechgroup.com","url":"https://alion.io/company/lyratechgroup","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":86000,"max":90000,"currency":"USD","period":"year","gross":null,"usd_annual":90000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"Microsoft Teams","optional":false}],"status":"live","first_seen_at":"2026-11-02T01:45:56Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-05T14:52:10Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Lyra Technology Group is a private equity-backed holding company that invests in and operates industry leading technology service businesses. Our companies are operated independently by exceptional management teams. Companies that join our group retain the employees, name, and culture that have made them successful. As a platform of Evergreen Services Group, we never divest from businesses we partner with and approach every decision with the goal of driving sustainable and healthy growth over the long term.\nImageQuest is looking for an Information Security Advisor to join our Advisory Services team. This role is centered on vendor management: delivering and strengthening ImageQuest's Vendor Management Program for clients, many of them in regulated industries such as banking and healthcare. The Information Security Advisor partners with client advisors to build audit- and exam-ready vendor management programs, provides day-to-day support and quality review for the team's vendor management work, and helps improve our processes through documentation and technology. The ideal candidate is an experienced third-party risk practitioner who is organized, methodical, and detail-oriented, enjoys bringing order out of disorder, and wants to grow into ImageQuest's broader Advisory services over time.\nYou will own...\nVendor Management Program Delivery\nDevelop and maintain the vendor and third-party risk components of each client's Information Security Program, supporting the designated CISO or Information Security Officer as needed.\nDevelop and uphold written vendor management policies and procedures, with a focus on new vendor onboarding and ongoing monitoring.\nPartner with clients to initiate due diligence based on their engagement requests, and own the follow-up process through completion.\nObtain and evaluate vendor documentation, including SOC reports, contracts, and financial statements.\nClassify each vendor based on its potential risk to the client's organization, and document the rationale for each classification.\nCoordinate and execute annual reviews and risk assessments for all critical and selected non-critical vendors, recommending follow-up actions to the appropriate parties.\nMaintain an accurate, up-to-date list of vendors and applications for each client, and keep the vendor management system current for all assigned accounts.\nPrepare Executive Summaries covering vendor performance, compliance status, and areas of concern or improvement.\nExam, Audit & Incident Support\nAssist Principals and Senior Advisors with vendor-related bank exam and audit requests, inquiries, and narratives.\nRecognize when a vendor incident or breach notification needs to be escalated for an assigned client, and escalate it promptly.\nMaintain strong regulatory knowledge, including GLBA, HIPAA, and interagency third-party risk guidance.\nTeam Support & Quality Oversight\nServe as the day-to-day point of contact for team members on vendor management questions.\nCoordinate the team's due diligence work, providing guidance to ensure consistent application across client assignments.\nReview vendor management deliverables before they go to clients, and give clear, constructive feedback as a peer.\nTrack recurring reviews and flag work at risk of missing a deadline.\nCoordinate with InfoSec Subject Matter Experts to ensure clarity on client assignments and accurate reporting.\nProcess Improvement\nHelp develop and maintain structured vendor management processes and documentation, including use of platforms such as Nvendor.\nContribute to process improvements using AI and other technologies.\nParticipate in process improvement meetings and on-site client focus groups as needed.\nClient Service & Collaboration\nProvide first-class client service and maintain a helpful, professional demeanor in all client and employee interactions.\nRespond to emails, phone calls, and Microsoft Teams messages in a timely and efficient manner.\nParticipate in on-site client visits, off-site client events, webinars, and training as needed.\nCollaborate with internal departments to meet goals and keep client satisfaction high.\nOur ideal Information Security Advisor has the following qualifications:\n3+ years of hands-on vendor management or third-party risk management experience, including vendor due diligence, risk classification, annual reviews, and evaluation of SOC reports.\nExperience planning and developing policies, procedures, and standards.\nA consultative, risk-based approach to security and process, and the ability and desire to work directly with clients.\nStrong ability to manage a high volume of deliverables across multiple clients with competing deadlines.\nExcellent organizational skills and strong attention to detail.\nStrong analytical and problem-solving skills, with sound initiative, judgment, and discretion.\nClear, concise written and verbal communication, and a calm, composed demeanor under pressure.\nAbility to work independently on tasks requiring patience, thoroughness, and quality, while working well as part of a team.\nProficiency with standard business software.\nBachelor's degree desired; advanced degree a plus.\nAdditional information security, IT audit, compliance, or risk management experience is a plus.\nVendor management experience in a regulated industry (e.g., banking, healthcare, insurance) is a plus.\nExperience with vendor management platforms such as Nvendor/Ncontracts is a plus.\nKnowledge of security concepts related to IT infrastructure is a plus.\nPreferred certifications include CTPRP, CISA, CISM, CISSP, or Security+.\nThis role is based in Brentwood, TN and will operate on a hybrid basis, with a base compensation range of $86,000-$90,000.\nWe are looking for someone who takes ownership of the vendor management work from intake through final deliverable, keeps multiple client deadlines on track, and holds every deliverable to a high standard. The right candidate brings order and consistency to a high-volume workflow, raises the quality of the team's work through clear feedback, and looks for practical ways to improve our processes. Once the Vendor Management Program is running consistently, this role offers a defined path to expand into ImageQuest's broader Advisory Services, including vCISO and Information Security Officer programs, risk assessments, policy development, incident response tabletop exercises, and AI risk advisory, supported by shadowing and cross-training.","description_format":"text","description_chars":6451,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-11-02T05:50:06Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":46,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":90000,"is_top_pay":false},"html_url":"https://alion.io/job/lyra-information-security-advisor","json_url":"https://alion.io/job/lyra-information-security-advisor.json","meta":{"generated_at":"2026-11-05T16:18:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21379,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678790},"rest":"https://alion.io/mcp/rest/get_company?id=678790"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flyra-information-security-advisor"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flyra-information-security-advisor"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flyra-information-security-advisor"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lyra-information-security-advisor\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flyra-information-security-advisor"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3597822}},{"tool":"search_jobs","arguments":{"company":"lyratechgroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3597822},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}