Senior Third-Party Risk Management Analyst

📋 Description

• Maintain the enterprise-wide inventory of third-party providers, applications, and services
• Lead and coordinate vendor cybersecurity assessments, partnering with cybersecurity, legal
• Evaluate vendor maturity against frameworks and requirements including NIST CSF, CIS, CMMC, GDPR
• Review vendor service-level agreements, RPO/RTO commitments, breach notification requirements
• Document assessment findings, recommendations, remediation plans, exceptions, and compensating
• Support internal and external audits by providing evidence and validating third-party controls

🎯 Requirements

• 5+ years of professional experience in cybersecurity, third-party risk management, risk management
• Strong knowledge of regulatory and compliance requirements, including PCI DSS, SOC 2, GDPR, GLBA
• Demonstrated experience evaluating both legacy environments and modern cloud technologies
• Strong understanding of APIs, application security, encryption, endpoint security, and network
• Familiarity with SIEM, intrusion detection systems, log management, vulnerability management, and
• Proven ability to assess vendor controls, map controls to recognized security frameworks, identify

🎁 Benefits

• Medical, dental, and vision benefits.
• 401(k) savings plan with company matching.
• Flexible planned paid time off.
• Generous sick leave.
• Employer-paid parental leave.
• Employer-paid short-term disability coverage.