The Senior DDQ/RFP Analyst will lead the end-to-end management of due-diligence questionnaires (DDQs), RFPs, and client security assessments for global Financial Services clients.
Key Responsibilities:
Lead intake, scoping, and prioritization of DDQs, RFPs, and security information requests.
Draft, refine, and finalize responses aligned with InfoSec and Compliance guidelines.
Map client questions to internal controls, certifications, and policies.
Coordinate with CISO, GRC, Legal, Engineering, and regional teams.
Perform detailed QA on responses.
Maintain centralized repository and version control.
Support French translation workflow.
Improve response processes and guide junior analysts.
Required Skills:
7 - 12 years in DDQ/RFP, GRC, vendor risk, or InfoSec roles.
Solid knowledge of ISO 27001, SOC 2, NIST CSF.
Excellent written communication.
Experience working with global stakeholders.