Third-Party Risk Analyst

Quick Facts

Third-Party Risk Analyst (TPRM/VRM)

Description

Work within Third-Party Risk Management to evaluate external vendors and partners across cybersecurity, IT risk, vendor risk management, and compliance. Perform vendor security assessments, supplier due diligence, cybersecurity questionnaires, security reviews, and risk assessments using established frameworks. Support regulatory compliance requirements and produce risk documentation for stakeholders.

Requirements

• 3–5 years of experience in Third-Party Risk Management (TPRM) / Vendor Risk Management (VRM) and cybersecurity risk and/or IT risk
• Hands-on experience with vendor security assessments
• Hands-on experience with supplier due diligence
• Practical experience with cybersecurity questionnaires
• Experience conducting security reviews and risk assessments
• Knowledge of NIST CSF, ISO 27001, and SOC 2 (CIS Controls is a plus)
• Understanding of Information Security, Data Privacy, Business Continuity, Cloud Security, Identity & Access Management, and Third-Party Security
• Knowledge of DORA, GDPR, SOX, NIST, and EBA Guidelines (PCI DSS is a plus; HIPAA if healthcare sector)
• Experience with third-party risk tools such as ServiceNow VRM, OneTrust, or Archer

Benefits

Not specified in the provided posting.