Junior Vendor Risk Assessment Analyst (Intern)

About the role

The Vendor Risk Assessment Junior Analyst will support Lightedge’s vendor risk management process by evaluating prospective and existing third‑party providers. This temporary role (initially three months, with possible extension) involves gathering documentation, classifying risk levels, and coordinating reviews to ensure security, privacy, compliance and AI risks are properly addressed.

Key responsibilities

• Collect preliminary vendor information from internal stakeholders, including service scope, data access, and business criticality.
• Apply established risk criteria to assign appropriate risk classifications and determine required due‑diligence depth.
• Conduct independent research on vendors, tracking security incidents, data breaches, regulatory actions, litigation and other risk indicators.
• Review and document findings from security, privacy and AI questionnaires, escalating material concerns as needed.
• Obtain and analyze security and compliance documentation such as SOC reports, ISO certifications, penetration‑test summaries and attestations.
• Identify gaps between vendor controls and Lightedge requirements and coordinate follow‑up with vendors.

Required profile

• Highly organized with strong analytical abilities.
• Comfortable working across multiple internal teams and with external vendors.
• Ability to manage assessments from intake through approval and ongoing monitoring.

Required skills