Security Risk Analyst: navigate critical vendor assessment