Third-Party Risk Management Analyst IV

📋 Description

• Leading end-to-end third-party security risk assessments using qualitative and quantitative methods
• Owning the vendor reassessment cadence and tracking remediation
• Partnering with Legal, Procurement, and system owners on vendor contracts and onboarding
• Escalating unresolved vendor risk
• Supporting internal and external audits (ISO, SOC, FedRAMP)
• Building and maintaining metrics, dashboards, and reporting

🎯 Requirements

• 5+ years in third-party/vendor risk management, GRC, or information security compliance
• Experience with automation, scripting, or low-code workflows
• Hands-on experience with vendor security assessments and tiering program
• Experience partnering with Legal and Procurement on contract security and privacy terms
• Must reside in the US outside SF Bay, NYC, and DC metro areas
• Familiarity with risk frameworks (NIST CSF, ISO 27001, SOC 2)

🎁 Benefits

• Incentive stock units (ISUs)
• Health benefits
• Equity awards
• Bonuses