Vendor Data Analyst

LEAP Legal Software is a multinational Legal Tech company that develops integrated productivity solutions for the legal profession including practice management, case management, document management, accounting, and legal publishing, as well as client and lawyer collaboration tools.
LEAP has more than 600 employees in offices throughout Canada, the United States, Australia, the United Kingdom, and New Zealand. LEAP supports the software needs of more than 25,000 law firms and has more than 10,000 firms using its flagship cloud product, LEAP.
LEAP will provide you with the best training, equipment, mentoring and support that we are capable of to optimise the chances of you being successful. But being successful in this role depends on you.
We employ people who can get things done and will appreciate being part of an accountable, high-performance culture.
A new Vendor Data Analyst Role has been created within the Global Enablement Team.
As a Vendor Data Analyst, you will be responsible for collecting, analysing, and interpreting data from various vendor sources globally. You will use this information to provide insights and recommendations to the Global Enablement and LEAP Marketplace Teams, assisting them in making informed decisions about vendor relationships. Additionally, you may be tasked with tracking vendor performance, identifying areas for improvement, and developing metrics for evaluating vendor performance & data usage.
To be successful, you will be someone who enjoys a hands-on roll, and is happy to roll up their sleeves to get the job done relishing the opportunity to work with stakeholders in Australia, New Zealand, the UK, US, and Canada.
**Reports to**
Chief Business Enablement Officer, LEAP Legal Software Ltd (Global)
**RESPONSIBILITIES**
- Assist with reviewing vendor and service security evaluations for alignment with security best practices & regulatory compliance.
- Summarise and follow up on documentation on vendors, their security posture, and any open concerns.
- Maintain an inventory of Third-Party Vendors who possess and/or interact with LEAP data, including key risk information about the relationship, data attributes involved, and regulatory compliance.
- Support completion LEAP Legal Software’s information security review process for all new Third-Party Vendors, and annual reviews for all other relationships that receive and/or interact with LEAP data.
- Maintain the Data Map and Record of Processing Activities (ROPA) based on Vendor questionnaires and PIA responses.
- Manage Vendor asset registry and asset owners list.
- Evaluate identified vulnerabilities and risks, working with business owners, risk management, and vendor representatives.
- Assist in the development of appropriate information security policies, standards, procedures, checklists, and guidelines using generally recognised security concepts for the LEAP Marketplace
- Ensure that identified risks are managed in accordance with the Vendor Risk Management program.
- Other information security duties as assigned.
- Continuous learning to deepen understanding of the business, risk management practices and industry developments.

**Competencies**
Technical knowledge and skills - having achieved a sound level of technical and professional skill and knowledge, keep up to date with changes in standards and good practices as relevant.
Business Acumen - using economic, financial, market, and industry data to understand and improve business results; using one’s understanding of major business functions, industry trends, and own organization’s position to contribute to effective business strategies and tactics.
Decision Making - identifying and understanding issues, problems, and opportunities; comparing data from different sources to draw conclusions; using effective approaches for choosing a course of action or developing appropriate solutions; taking action that is consistent with available facts, constraints, and probable consequences.
Communication and influencing - exceptional verbal and written communication skills, with the ability to succinctly convey key messages and complex information to stakeholders in a simple and succinct manner. Strong ability to advise and influence senior stakeholders.
Adaptability - maintaining effectiveness when experiencing major changes in work responsibilities or environment; adjusting effectively to work within new work structures, processes, requirements, or cultures.

**Requirements**:

- Minimum 2 years relevant Data & Privacy Analysis experience
- Technical skills in:

- implementing & managing questionnaires
- PIAs (privacy impact assessments and data transfer impact assessments) via OneTrust or equivalent
- Deep current technical expertise in managing Data Security and Privacy in a cloud-based environment, including knowledge of AWS / Azure, and Agile development methodology.
- Tertiary degree in a relevant discipline (Business, Commerce, Risk, Finance, or Engineering)
- Demo