Senior Third-Party Risk Management Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Third-Party Risk Management Analyst based in United States.

This role is a key contributor to an enterprise-wide cybersecurity, risk, and compliance program, with a strong focus on third-party risk. You will assess vendors, applications, platforms, and service providers against cybersecurity, privacy, resiliency, and regulatory requirements. Working across cybersecurity, legal, procurement, product, client success, and leadership teams, you will turn complex risk findings into practical recommendations. You will support critical compliance programs, including SOC 2 Type II and PCI DSS, while helping maintain audit-ready documentation and controls. The role also contributes to vulnerability communications, business continuity, and continuous improvement of the broader information security management system. This is an opportunity to take meaningful ownership of a growing TPRM program in a collaborative, remote environment.