TPRM Analyst

Position Summary The Third-Party Risk Management Analyst runs the vendor due diligence program on the enterprise third-party risk platform. The organization engages thousands of suppliers, a substantial number of which have never been formally risk assessed, and the first mandate of this role is to reduce that population while establishing sustainable ongoing monitoring behind it. Third-party exposure is one of the highest-probability incident vectors in the industry, and vendors with access to enterprise systems or physical facilities all fall within scope. This role also serves as the first gate in the vendor intake process, assessing risk before the organization commits the limited resources of procurement, contracting, legal, and cybersecurity.…