Third-Party Risk Management Analyst

📋 Description

• Lead end-to-end third-party security risk assessments using qualitative and quantitative
• Own the vendor reassessment cadence and monitor remediation of security gaps throughout the full
• Partner with Legal, Procurement, and system or relationship owners to review vendor onboarding
• Evaluate and support requirements related to incident notification, data security and training
• Escalate unresolved or significant vendor risks to Security leadership, Legal, Procurement, and
• Support internal and external audits of the third-party risk management program, including

🎯 Requirements

• 5+ years of experience in third-party or vendor risk management, Governance, Risk, and Compliance
• Hands-on experience conducting vendor security assessments and administering vendor risk tiering
• Experience using automation, scripting, or low-code workflows to improve and scale vendor risk
• Demonstrated experience partnering with Legal and Procurement on vendor security and privacy
• Familiarity with risk assessment frameworks such as NIST CSF, ISO 27001, or SOC 2.
• Experience using GRC or vendor risk management platforms such as Vanta, ServiceNow, OneTrust

🎁 Benefits

• Annual base salary of $110,670–$167,400 USD, with actual compensation varying based on factors such
• Eligibility for an initial RSU grant with no vesting cliff, subject to applicable plan terms and
• Ongoing equity refresh opportunities tied to performance, subject to plan terms and conditions.
• Potential performance-based bonus and variable compensation as part of a broader total rewards
• Flexible, employee-led remote work model.
• Comprehensive health and parental leave plans.