Senior Third Party Risk Analyst
Core
Lead the Third-Party Risk Management program, developing quantitative risk assessment methodologies and managing the enterprise risk register for supplier onboarding and lifecycle processes.
Role type
Senior Third Party Risk Analyst
Builds
Supplier risk assessments, risk registers, and automated risk reporting workflows
Domain
Cybersecurity and Third-Party Risk Management (TPRM)
Required skills
Quantitative risk analysis, risk register management, GRC platform proficiency, AI/automation implementation, stakeholder management, process documentation
Preferred skills
Experience with OneTrust, Archer, ServiceNow, workflow orchestration technologies
Technologies
OneTrust, Archer, ServiceNow, AI-enabled solutions, automation platforms
Responsibilities
Lead day-to-day execution and continuous improvement of the TPRM program; Develop and refine third-party risk assessment methodologies; Partner with Procurement, Legal, Privacy, Compliance, and Information Security teams; Establish metrics and reporting to measure supplier risk exposure; Mature risk scoring methodologies for quantitative assessment; Maintain and continuously improve the cybersecurity risk register; Create, maintain, and improve program procedures and workflows; Champion the use of AI-enabled solutions to improve operational efficiency
Seniority
Senior, hands-on IC
