Third-Party Risk Management (TPRM) Risk Analyst
Core
Assess third-party relationship risks using formula-based methodologies to support onboarding and ongoing monitoring lifecycles.
Role type
Senior Third-Party Risk Management (TPRM) Risk Analyst
Builds
Risk assessments, remediation plans, and portfolio-level trend analysis for vendor ecosystems.
Domain
Technology / Cybersecurity / Governance, Risk & Compliance (GRC)
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure | physical/clinical work
Required skills
Third-Party Risk Management (TPRM), formula-based risk methodologies, risk assessment validation, regulatory compliance interpretation, data analysis, stakeholder liaison, audit preparation, mentorship
Preferred skills
Quantitative risk modeling, complex ecosystem management, strategic initiative support
Technologies
TPRM platforms, NIST SP 800-53, ISO 27001, SOC 2, SIG Core/Lite, CAIQ, DORA, GDPR, NIS2, FedRAMP, PCI-DSS, OCC, CCPA
Responsibilities
Validate inherent risk ratings and criticality designations for third-party relationships; review third-party documentation and flag gaps; lead communication to remediate high-risk gaps; lead portfolio-level trend analysis and build leadership/audit reporting; oversee periodic review processes and escalation of high-risk findings; mentor junior analysts and support audit/customer discussions
Seniority
Senior, hands-on IC with mentorship responsibilities
