Security Auditor Jr

1-2 years of experience in GRC, IT audit, information security, or third-party risk support roles (internship or entry-level professional experience acceptable). Basic understanding of vendor risk assessment concepts and security due diligence documentation (policies, certifications, audit reports). Exposure to — or coursework/training in — SIG questionnaires or similar standardized security questionnaires is a plus, not mandatory. Comfortable with structured, high-volume administrative and coordination work (tracking, correspondence, documentation review). General exposure to IRM/GRC platforms is a plus; not required. Willingness and aptitude to learn Radian's NAVEX/EBX environment is expected. Support profiling: engagement record review, SDD record creation, documentation checklist prep. Execute vendor correspondence and follow-ups on Reduced Due Diligence cases. Perform first-pass review of Reduced Due Diligence questionnaires and documentation. Maintain IRM dashboard updates and SLA tracking logs. Escalate per defined thresholds; route Full DD / high-complexity findings to the Proficient analyst. Progressively take on Full Due Diligence support tasks as ramp-up governance milestones are met.