C.H Robinson is seeking a Senior Technology Audit Analyst, who will lead the assessment and management of cybersecurity risks associated with third-party vendors, suppliers, and service providers. In this role, you will evaluate vendor security controls, review compliance and audit documentation, and provide risk-based recommendations to support secure business partnerships. Leveraging your expertise in cybersecurity, risk management, and stakeholder engagement, you will collaborate across security, procurement, legal, compliance, and business teams to strengthen our third-party risk management program and protect organizational assets.
At C.H. Robinson our roots run deep. In 1905, Charles Henry Robinson started a small produce brokerage that developed the traditions and standards of service that shaped and named us as the Fortune 200 company we are today. C.H. Robinson solves logistics problems for companies across the globe and across industries, from the simple to the most complex. With over $30 billion in freight under management and 20 million shipments annually, we are the world’s largest logistics platform. Our global suite of services accelerates trade to seamlessly deliver the products and goods that drive the world’s economy. We use our information advantage to deliver smarter solutions for our more than 124,000 customers and 76,000 contract carriers. Our technology is built by and for supply chain experts to bring faster, more meaningful improvements to our customers’ businesses.
This position is open to candidates located in Minneapolis, Chicago, or Kansas City.
Responsibilities:
Conduct cybersecurity assessments of third-party vendors to evaluate security controls, risks, and compliance with organizational standards.
Review security documentation, certifications, audit reports, and policies to validate vendor security posture.
Assess risks related to data protection, regulatory compliance, access management, and service delivery, and provide mitigation recommendations.
Support vendor due diligence and onboarding by identifying security requirements and recommending risk-based approvals.
Track remediation efforts for identified security gaps and validate the effectiveness of corrective actions.
Collaborate with procurement, legal, compliance, privacy, and business stakeholders to manage and communicate third-party cybersecurity risks
Advance audit innovation by leveraging automation, analytics, and (where appropriate) AI
Required Qualifications:
4 + years of experience with auditing or related risk management experience
Minimum 2-3 year of experience conducting cybersecurity assessments within an enterprise Technology environment
Experience reviewing SOC 2 reports
Ability to work independently with strong ownership and accountability
Demonstrated ability to work with large data sets including analyzing, filtering, comparing, data validation, and risk-based sampling
Demonstrated ability to document and review audit test procedures in detailed, high-quality work papers
Bachelor’s degree or minimum of 4 years of equivalent work experience and high school diploma/GED
Preferred Qualifications:
Experience managing vendors
Strong written and verbal communication skills with the ability to assess senior audiences and adjust content, style, and approach to meet their needs
Experience leading meetings, keeping focus, and balancing multiple viewpoints from stakeholders
Demonstrated relationship management experience with comfort collaborating across the organization and ability to present to, partner with, manage, and influence others across the organization including senior leadership
Ability to work with confidential information with a high degree of integrity
Ability to keep up on regulatory changes that may impact CHR’s operations
Possess strong analytical, problem-solving, and decision-making skills
Ability to handle multiple tasks simultaneously, strong organization and prioritization skills
Demonstrated ability to…