Senior Analyst, Third-Party Risk Management (TPRM)
Core
Architect and govern security strategy for BPO and contingent worker ecosystems, driving the maturation of the TPRM program from reactive compliance to proactive security partnership.
Role type
Senior IC Third-Party Risk Management (TPRM) Analyst
Builds
Centralized reporting function, risk dashboards, and automated TPRM processes
Domain
Technology and logistics / Information Security / Third-Party Risk Management
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
TPRM program ownership, security risk and gap assessments, cloud/SaaS/AI vendor vetting, security assurance documentation review (CAIQ, SOC 2, ISO 27001), AI/ML model risk analysis, NIST/ISO framework implementation, cross-functional security advisory
Preferred skills
CISA, CISSP, CISM certifications
Technologies
AWS, Azure, GCP, AI/ML platforms
Responsibilities
Drive continuous maturation of the TPRM program; Architect and govern security strategy for BPO and contingent worker ecosystem; Design and build process automations; Pioneer and lead the Supplier Security AI Governance framework; Establish and own core program governance and build a centralized reporting function; Partner cross-functionally with security, procurement, and legal teams; Lead end-to-end issues and remediation tracking; Execute the core TPRM lifecycle (risk assessments, due diligence, onboarding, contract reviews)
Seniority
Senior, hands-on IC
