Senior Analyst, Third-Party Risk Management

What you'll do

• Drive the continuous maturation of the Third-Party Risk Management (TPRM) program into a proactive security partnership.
• Architect and govern the security strategy for the BPO and contingent worker ecosystem.
• Design and build process automations to optimize and scale the TPRM program.
• Lead the Supplier Security AI Governance framework to evaluate and secure third-party AI tools.
• Establish core program governance and a centralized reporting function with risk dashboards for leadership.
• Manage the end-to-end issues and remediation tracking process for all security findings.
• Execute the full TPRM lifecycle including risk assessments, due diligence, and contract reviews.

What we're looking for

• Bachelor’s or Master’s degree in Information Security, Computer Science, Business Administration, or a related field.
• 7+ years of progressive experience in security-focused TPRM methodologies and leading programs for high-growth companies.
• Experience building programs, conducting security/assurance audits, managing controls, and overseeing risk assessments and remediation.
• Technical expertise in assessing risks for cloud, SaaS, infrastructure, and Artificial Intelligence (AI) solutions.
• Proficiency in reviewing security documentation such as CAIQ, SIG, SOC 2 Type 2 reports, and various compliance attestations.
• Experience evaluating complex vendor solutions including API integrations, cloud-native services, and generative AI platforms.
• Experience implementing major information security, privacy, and risk management frameworks like NIST, ISO, or SOC 2.
• CISA, CISSP, CISM, or other industry certifications are preferred.