Position Summary Effectual is seeking an Associate Business Analyst to support a third-party risk and vendor security assurance program for a large enterprise customer. This role will work closely with the Senior Business Analyst to improve efficiency, accuracy, and visibility of third-party vendor security reviews. The Associate Business Analyst will assist with intake triage, execution of standard review workflows, vendor metadata maintenance, and day-to-day operational tasks that support third-party governance. This position is ideal for someone early in their security career who is detail-oriented, eager to learn, and motivated to grow into more advanced risk, automation, and AI-enabled workflow capabilities over time. Essential Duties and Responsibilities Support intake triage of third-party vendor requests and route cases according to established SSA workflows Assist with initial vendor security review steps, including documentation collection and preliminary analysis Maintain and enrich vendor metadata within systems such as Grip Security, Airtable, OneTrust, ZipHQ, and the Customer Software List Ensure accurate data entry, tagging, and quality assurance across SSA tracking tools Support workflow automation efforts in Jira, Airtable, and Goose under senior guidance Track SLAs, update review logs, and maintain operational dashboards Document review outcomes and maintain process guidance materials Participate in team training, cross-functional onboarding sessions, and continuous improvement activities Provide surge support during high-volume periods or when senior staff are unavailable

Qualifications

Foundational understanding of third-party risk, SaaS applications, or security review processes Experience with common business and security tools (e.g., Jira, Airtable, G Suite, Slack) Strong attention to detail and ability to follow structured workflows Excellent written communication and documentation skills Ability to manage multiple tasks simultaneously and meet deadlines Willingness to learn automation technologies and AI-enabled review processes

Nice-to-Have

Skills and Experience Exposure to vendor governance, SOC/ISO certifications, or SaaS security assessments Basic familiarity with Python, SQL, or lightweight scripting Exposure to vendor governance, SOC/ISO certifications, or SaaS security assessments (preferred) Experience with data tools such as Airtable, Snowflake, or Grip Security Company Offered Benefits Full-time employees are eligible to participate in our employee benefit programs: Medical, dental, and vision health insurances, Short term disability, long term disability and life insurances, 401k with Company match Paid time off (PTO) (120 hours PTO that accrue over one year) Paid time off for major holidays (14 days per year) These and any other employee benefit offerings are subject to management’s discretion and may change at any time. Physical Demands and Work Environment The work is generally performed in an office environment. Physical demands include sitting, keyboarding, verbal communication, written communication. Employees are occasionally required to stand; walk; reach with hands and arms; climb or balance; and stoop, kneel, crouch, or crawl. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodation may be made to enable individuals with disabilities to perform the functions. Salary Range for this position: $70,000-$80,000 "Salary ranges provided are for informational purposes only and may vary depending on factors such as experience, qualifications, and geographic location. The final salary offer will be determined based on the candidate's skills and alignment with the role requirements." This job description may not be inclusive of all assigned duties, responsibilities, or aspects of the job described, and may be amended anytime at the sole discretion of the Employer. Duties and responsibilities are subject to possible modification to reasonably accommodate individuals with disabilities. To perform this job successfully, the incumbents will possess the skills, aptitudes, and abilities to perform each duty proficiently. This document does not create an employment contract, implied or otherwise, other than an “at will” relationship. Effectual Inc. is an EEO employer and does not discriminate on the basis of any protected classification in its hiring, promoting, or any other job-related opportunity.