Associate Third-Party Risk Management (TPRM) Risk Analyst

📋 Description

• Apply the TPRM Program’s formula-based inherent risk methodology and assign Criticality
• Perform completeness and consistency checks on intake information, risk calculations, and
• Gather, organize, and maintain third-party-provided information and documentation in accordance
• Identify and route required SME reviews using defined risk triggers, track responses, and document
• Maintain accurate and timely records in Graphite Connect, Jira, and other approved systems of
• Support execution of third-party risk assessment remediation of identified gaps or findings based

🎯 Requirements

• 3-5 years of experience in Third-Party Risk Management (TPRM) or Governance, Risk & Compliance
• Demonstrated experience performing substantive risk assessments and applying formula-based or
• Bachelor’s degree in a relevant field (Cybersecurity, Business, Information Systems).
• Proficiency with a TPRM platform, including the ability to interpret intake data, Data Level
• Operational understanding of standard control frameworks (NIST SP 800-53, ISO 27001, SOC 2, SIG
• Working knowledge of regulatory requirements relevant to the third-party population (e.g., DORA

🎁 Benefits

• Equity
• Participation in the employee stock purchase program
• Flexible paid time off
• 20 weeks fully-paid gender-neutral parental leave
• Fertility and adoption assistance
• 401(k) plan