Senior Analyst, Third Party Risk Management

📋 Description

• Conduct security and risk assessments for new and existing vendors (SaaS, cloud, fintech, service
• Evaluate vendor questionnaires and validate evidence (ISO 27001, SOC 2, PCI DSS, GDPR controls)
• Perform inherent and residual risk scoring based on data sensitivity, access level, and vendor
• Document risk findings and recommend remediation actions
• Review security documentation including policies, architecture diagrams, pen test summaries, and
• Identify control gaps and collaborate with vendors to track remediation

🎯 Requirements

• 6–10 years of experience in Third Party Risk Management, GRC, IT Risk, or Information Security
• Experience conducting vendor security assessments and due diligence
• Strong understanding of ISO 27001, SOC 2, PCI DSS, and data protection fundamentals
• Experience reviewing security documentation and audit artifacts
• Ability to interpret vulnerability reports and pen test summaries
• Experience working with GRC/TPRM tools (ServiceNow, OneTrust, Archer, Jira, etc.)