Third Party Risk Analyst, Security GRC

📋 Description

• Own Mission Critical vendor portfolio; maintain tiered list and risk treatment.
• Manage Highest-Risk vendor portfolio; align assessments to exposure.
• Support vendor incident response; coordinate with owners and actions.
• Run inherent risk assessments; review controls and determine residual risk.
• Operate the TPRM issue workflow; document findings and track closure.
• Salary: $255,000 - $270,000 USD.

🎯 Requirements

• Bachelor's degree or equivalent in a relevant field.
• Experience running vendor risk assessments end to end at a tech company.
• Knowledge of risk fundamentals; apply when evidence is incomplete.
• Assess vendors across security, privacy, compliance and operational risk.
• Hands-on in procurement or GRC platform with intake and routing.
• Experience building or tuning an LLM-backed workflow; prompts and QA.

🎁 Benefits

• Competitive compensation and benefits.
• Optional equity donation matching.
• Generous vacation and parental leave.
• Flexible working hours.
• Lovely office space for collaboration.