Job Description
Chicago IL USA
Hybrid
114K-194K Annually
Senior level
Artificial Intelligence • Big Data • Enterprise Web • Fintech • Software • Financial Services
Empowering Investor Success
The Role
The Senior IT Risk and Compliance Analyst will manage third party vendor risk assessments improve the vendor risk management program and collaborate with internal teams to ensure compliance with security policies.
Summary Generated by Built In
The Group:
The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality integrity and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security policies and procedures disaster recovery and compliance/regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure.
The Role:
The Information Security Team is looking for a Senior Analyst Third-Party Vendor Risk Analyst to join the IT Compliance Team. The Senior Third-Party Vendor Risk Analyst will help shape the Information Security Team's third party vendor risk management program. This individual will serve as a subject matter expert for third party vendor risk management perform vendor risk assessments propose updates to expand the program's capabilities increase participation in the program and drive process improvements. This position is based in either our Chicago or Toronto office.
Responsibilities:
Requirements:
Compensation and Benefits
At Morningstar we believe people are at their best when they are at their healthiest. That's why we champion your wellness through a wide range of programs that support all stages of your personal and professional life. Here are some examples of the offerings we provide:
Total Cash Compensation Range
$114100.00 - 193975.00 USD Annual
Inclusive of annual base salary and target incentive
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are you'll have tools and resources to engage meaningfully with your global colleagues.
001_MstarInc Morningstar Inc. Legal Entity
The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality integrity and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security policies and procedures disaster recovery and compliance/regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure.
The Role:
The Information Security Team is looking for a Senior Analyst Third-Party Vendor Risk Analyst to join the IT Compliance Team. The Senior Third-Party Vendor Risk Analyst will help shape the Information Security Team's third party vendor risk management program. This individual will serve as a subject matter expert for third party vendor risk management perform vendor risk assessments propose updates to expand the program's capabilities increase participation in the program and drive process improvements. This position is based in either our Chicago or Toronto office.
Responsibilities:
- Partner with the business to execute vendor risk assessments
- Monitor internal SLAs to ensure we provide timely service to our internal stakeholders
- Serve as a subject matter expert for security vendor risk management
- Collaborate with the procurement department and other internal stakeholders to improve and expand the vendor risk management program
- Review third party security documents (SOC2 security policies data flow diagrams etc.)
- Perform contract reviews of proposed changes to security requirements in our third party contracts
- Liaise with third party vendors as required
Requirements:
- A bachelor's degree and 5+ years' experience include 3+ in a vendor risk related role
- Experience serving as the subject matter expert for security vendor due diligence
- Experience performing contract review of security terms
- Familiarity with common compliance standards (SOX SOC2 PCI-DSS GDPR etc.)
- Familiarity with security frameworks (ISO 27001 NIST etc.) and general security concepts
- Strong organizational skills and the ability to multitask and switch priorities with short notice
- Strong business analysis research and analytical skills
- Excellent communication skills
Compensation and Benefits
At Morningstar we believe people are at their best when they are at their healthiest. That's why we champion your wellness through a wide range of programs that support all stages of your personal and professional life. Here are some examples of the offerings we provide:
- Financial Health
- 100% 401k match up to 6% of salary
- Stock Ownership Potential
- Company provided life insurance - 1x salary + commission
- Physical Health
- Comprehensive health benefits (medical/dental/vision) including potential premium discounts and company-provided HSA contributions (up to $500-$2000 annually) for specific plans and coverages
- Additional medical Wellness Incentives - up to $300-$600 annual
- Company-provided long- and short-term disability insurance
- Emotional Health
- Trust-Based Time Off
- 6-week Paid Sabbatical Program
- 6-Week Paid Family Caregiving Leave
- Competitive 8-24 Week Paid Parental Leave
- Adoption Assistance
- Leadership Coaching & Formal Mentorship Opportunities
- Annual Flex Stipend - $1000 annually to cover personal education & well-being expenses
- Tuition Reimbursement
- Social Health
- Charitable Matching Gifts program
- Dollars for Doers volunteer program
- Paid volunteering days
- 15+ Employee Resource & Affinity Groups
Total Cash Compensation Range
$114100.00 - 193975.00 USD Annual
Inclusive of annual base salary and target incentive
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are you'll have tools and resources to engage meaningfully with your global colleagues.
001_MstarInc Morningstar Inc. Legal Entity
Top Skills
Gdpr
Iso 27001
Nist
Pci-Dss
Soc2
Sox
What the Team is Saying
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
The Company
HQ: Chicago IL
11500 Employees
Year Founded: 1984
What We Do
At Morningstar we believe in building great products in-house in a highly collaborative agile environment where we focus on technical excellence the user experience and continuous improvement. Our technologists represent a range of skills and experience levels but they all view their work as a craft and push technology’s boundaries.
Why Work With Us
Imagining big things is in our blood -- it's transformed us from a company with just a few employees in 1984 to a leading independent investment research company with a worldwide presence today. As of April 2020 we acquired Sustainalytics to drive long-term meaningful outcomes for investors in the ESG space. Join us on this exciting journey!
Gallery
Morningstar Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Typical time on-site: 3 days a week
HQGlobal Headquarters
Mexico City
Santiago Province
LU
NSW
Amsterdam NL
Bangkok TH
Cape Town ZA
Dubai Dubai
Frankfurt am Main DE
Frederiksberg DK
London GB
Madrid ES
Milano IT
Navi Mumbai Maharashtra
New York NY
Oakland MD
Oslo NO
Paris FR
São Paulo São Paulo
PitchBook US Headquarters
Stockholm SE
Tokyo JP
Toronto ON
Toronto Ontario
Zürich CH
Learn more
Similar Jobs
Morningstar
Data Engineer
Artificial Intelligence • Big Data • Enterprise Web • Fintech • Software • Financial Services
Hybrid
Chicago IL USA
11500 Employees
114K-194K Annually
Morningstar
Marketing Manager
Artificial Intelligence • Big Data • Enterprise Web • Fintech • Software • Financial Services
Hybrid
Chicago IL USA
11500 Employees
100K-500K Annually
Morningstar
Senior Auditor
Artificial Intelligence • Big Data • Enterprise Web • Fintech • Software • Financial Services
Hybrid
Chicago IL USA
11500 Employees
100K-500K Annually
Morningstar
Business Analyst
Artificial Intelligence • Big Data • Enterprise Web • Fintech • Software • Financial Services
Hybrid
Chicago IL USA
11500 Employees
100K-500K Annually
Explore More
Apply Now
Back to Job Listings
Add To Job List
Company Profile
View Company Reviews
Date Posted
04/15/2026
Views
0
Neutral
Subjectivity Score: 0