Third-Party Risk Management Analyst

Job Summary

A company is looking for a Third-Party Risk Management Security Analyst.

Key Responsibilities

• Conduct end-to-end vendor information security assessments and manage risk levels
• Administer and automate TPRM workflows within ServiceNow GRC
• Collaborate with cross-functional teams to embed security requirements in vendor processes

Required Qualifications

• 5+ years in Information Security with a focus on TPRM or InfoSec GRC
• Experience with ServiceNow GRC for automating TPRM workflows
• Knowledge of NIST CSF, HITRUST CSF, SOC 2, ISO 27001, and HIPAA Security Rule
• Experience with vendor security questionnaires and evidence-based audits
• Strong stakeholder management skills and ability to present findings to leadership