Senior Analyst, Third-Party Risk Management (TPRM)

We are looking for a Senior Analyst, Third-Party Risk Management (TPRM) to join our Governance, Risk, and Compliance (GRC) team. The successful candidate will drive the continuous maturation of our TPRM program, architect and govern the security strategy for our BPO and contingent worker ecosystem, and pioneer and lead the Supplier Security AI Governance framework. Requirements • 7+ years of progressive experience in security-focused TPRM methodologies • Bachelor's or Master's degree in Information Security, Computer Science, Business Administration, or related field • Experience with program building, conducting security and/or assurance audits, controls, and risk assessments, and remediation management • Deep technical understanding and experience conducting comprehensive security risk and gap assessments of cloud, SaaS, including Artificial Intelligence (AI) solutions, and infrastructure vendors • Proficiency in the technical review of core security assurance documentation • Experience in the technical vetting of complex vendor solutions • Practical experience in assessing the unique risks associated with AI/ML models • Experience with implementing major information security, privacy, and risk management frameworks (e.g., NIST, ISO, SOC 2) • Experience managing security and compliance programs across broad GRC disciplines within a complex, global public company environment • Excellent verbal and written communication skills with the ability to effectively translate technical risk findings into a clear business context for diverse audiences Benefits • 401(k) plan with employer matching • 16 weeks of paid parental leave • Wellness benefits • Commuter benefits match • Paid time off and paid sick leave in compliance with applicable laws • Medical, dental, and vision benefits • 11 paid holidays • Disability and basic life insurance • Family-forming assistance • Mental health program Apply tot his job