Senior Third Party Risk (TPRM) Cybersecurity Analyst
Core
Design and govern third-party risk management practices, conduct advanced vendor security assessments, and translate security findings into actionable risk insights for business and compliance stakeholders.
Role type
Senior IC third-party risk management (TPRM) cybersecurity analyst
Builds
Third-party risk governance frameworks, vendor security assessment reports, and executive risk dashboards
Domain
Healthcare / Cybersecurity / Third-Party Risk Management
Deliverable
dashboards & analysis
Required skills
Vendor security assessment, risk analysis, NIST/ISO/SOC2/HITRUST frameworks, stakeholder collaboration, risk documentation, continuous monitoring
Preferred skills
TPRM program design, continuous monitoring tools, cloud/SaaS security assessment, GRC tools, CISSP/CISM/CRISC certifications
Technologies
NIST, ISO 27001, SOC 2, HITRUST, CIS, GRC tools
Responsibilities
Design and enhance third-party risk management processes and workflows; Lead advanced vendor security assessments and remediation validation; Evaluate vendor cybersecurity posture against frameworks; Partner with cross-functional teams to integrate risk insights; Develop continuous monitoring approaches for critical vendors; Translate complex cyber risk findings into clear recommendations; Support executive reporting and metrics; Mentor peers on assessment practices
Seniority
Senior, hands-on IC with mentorship
