Sr. Analyst, Cybersecurity, Third Party Risk Management (TPRM)
Core
Lead, execute, and enhance the Third-Party Risk Management (TPRM) program to identify, assess, monitor, and reduce cybersecurity risks from vendors, service providers, and technology partners.
Role type
Senior IC Information Risk Analyst (TPRM)
Builds
Enterprise TPRM program, risk assessments, and monitoring workflows for third parties
Domain
Cybersecurity / Third-Party Risk Management
Required skills
Third-party risk management program execution, risk assessment and scoring, GRC platform management, regulatory compliance, data privacy, contractual risk terms, risk acceptance management, continuous monitoring, data quality management, stakeholder reporting
Preferred skills
CRISC, CTPRP, CTPRA, CRVPM, CISSP certifications, NIST CSF, NIST RMF, ISO 31000, COSO ERM frameworks, AI tools for data analysis
Technologies
Optro, OneTrust, Archer, BlackKite, BitSight
Responsibilities
Own and drive TPRM program strategy and multi-year roadmap; manage intake, prioritization, and assessment of prospective and existing third parties; partner with internal and external teams to conduct risk reviews across security, privacy, and compliance; facilitate risk acceptances and exceptions; perform ongoing monitoring and periodic reassessments; manage third-party data in centralized GRC platform; prepare and deliver program updates to leadership
Seniority
Senior, hands-on IC
