Third-Party Security Risk Analyst

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Third-Party Security Risk Analyst based in the United States.

The Third-Party Security Risk Analyst will play an important role in strengthening cybersecurity governance and protecting the organization through effective third-party risk management. Working within the Cybersecurity Governance, Risk Management, and Compliance (GRC) team, you will support the full vendor risk lifecycle, from initial onboarding and risk assessments to ongoing monitoring and offboarding. You will evaluate vendor security practices, identify potential vulnerabilities, document risk exposure, and coordinate remediation efforts. The role also involves collaborating with cross-functional teams, including Legal, Procurement, Compliance, Finance, and Enterprise Risk Management. You will contribute to improving risk management processes through automation and emerging AI-enabled solutions. This is an excellent opportunity to develop your cybersecurity expertise while helping build a resilient and secure third-party ecosystem.