Third Party Risk Engineer, Digital Technology
Job Summary
As a key member of the Digital Technology Risk Assurance team, the Technology Risk Analyst will leverage their practical knowledge and experience to independently assess and manage technology risks associated with third-party vendors. This role requires a proactive individual capable of tackling complex challenges with minimal guidance, contributing significantly to the organization's overall risk posture.
Essential Functions
ā¢ Comprehensive Vendor Evaluation: Conduct in-depth evaluations of third-party vendors and service providers, encompassing their financial stability, operational performance, and adherence to regulatory compliance requirements.
ā¢ Risk Identification and Mitigation: Proactively identify potential technology risks and vulnerabilities within third-party relationships, subsequently developing and implementing effective mitigation strategies and plans.
ā¢ Cross-Functional Collaboration and Communication: Foster strong collaborative relationships with internal teams, including procurement, legal, IT, and compliance, to ensure a unified and consistent approach to third-party risk management. Communicate and interact effectively and professionally with all stakeholders, including co-workers, management, business partners, and customers.
ā¢ Compliance and Standards Alignment: Ensure all third-party risk management practices are meticulously aligned with established industry standards, regulatory requirements, and the organization's strategic goals.
ā¢ Continuous Monitoring and Oversight: Implement and maintain continuous monitoring of third-party performance and compliance through regular audits, reviews, and performance assessments.
ā¢ Documentation and Record Keeping: Maintain thorough, accurate, and up-to-date records pertaining to all third-party risk management processes and activities.
ā¢ Organizational Awareness and Best Practices: Actively contribute to raising awareness of critical third-party risk issues and promote best practices across the organization.
Qualifications
Required Experience:
ā¢ 2ā4 years in technology risk, cybersecurity, audit, compliance, or third-party risk management.
ā¢ Experience performing vendor risk assessments, due diligence, and ongoing monitoring.
ā¢ Working knowledge of risk frameworks (e.g., NIST, ISO 27001).
ā¢ Strong communication and stakeholder management skills.
ā¢ Analytical and detail-oriented with the ability to identify and address risk gaps.
ā¢ Familiarity with GRC or vendor risk management tools.
Preferred Experience:
ā¢ 3+ years of third-party risk management experience, including process or framework improvement.
ā¢ Professional certifications (CISA, CISM, CRISC, CISSP, CTPRA, etc.).
ā¢ Experience in regulated industries or familiarity with third-party risk regulations.
ā¢ Understanding of IT and cybersecurity concepts (cloud, network, application security).
ā¢ Experience automating TPRM workflows or using GRC platforms (e.g., ServiceNow).
ā¢ Ability to work across teams such as Legal, Procurement, and Technology.
ā¢ Experience managing the full vendor risk lifecycle (onboarding through offboarding).
Apply Now
Apply Now
As a key member of the Digital Technology Risk Assurance team, the Technology Risk Analyst will leverage their practical knowledge and experience to independently assess and manage technology risks associated with third-party vendors. This role requires a proactive individual capable of tackling complex challenges with minimal guidance, contributing significantly to the organization's overall risk posture.
Essential Functions
ā¢ Comprehensive Vendor Evaluation: Conduct in-depth evaluations of third-party vendors and service providers, encompassing their financial stability, operational performance, and adherence to regulatory compliance requirements.
ā¢ Risk Identification and Mitigation: Proactively identify potential technology risks and vulnerabilities within third-party relationships, subsequently developing and implementing effective mitigation strategies and plans.
ā¢ Cross-Functional Collaboration and Communication: Foster strong collaborative relationships with internal teams, including procurement, legal, IT, and compliance, to ensure a unified and consistent approach to third-party risk management. Communicate and interact effectively and professionally with all stakeholders, including co-workers, management, business partners, and customers.
ā¢ Compliance and Standards Alignment: Ensure all third-party risk management practices are meticulously aligned with established industry standards, regulatory requirements, and the organization's strategic goals.
ā¢ Continuous Monitoring and Oversight: Implement and maintain continuous monitoring of third-party performance and compliance through regular audits, reviews, and performance assessments.
ā¢ Documentation and Record Keeping: Maintain thorough, accurate, and up-to-date records pertaining to all third-party risk management processes and activities.
ā¢ Organizational Awareness and Best Practices: Actively contribute to raising awareness of critical third-party risk issues and promote best practices across the organization.
Qualifications
Required Experience:
ā¢ 2ā4 years in technology risk, cybersecurity, audit, compliance, or third-party risk management.
ā¢ Experience performing vendor risk assessments, due diligence, and ongoing monitoring.
ā¢ Working knowledge of risk frameworks (e.g., NIST, ISO 27001).
ā¢ Strong communication and stakeholder management skills.
ā¢ Analytical and detail-oriented with the ability to identify and address risk gaps.
ā¢ Familiarity with GRC or vendor risk management tools.
Preferred Experience:
ā¢ 3+ years of third-party risk management experience, including process or framework improvement.
ā¢ Professional certifications (CISA, CISM, CRISC, CISSP, CTPRA, etc.).
ā¢ Experience in regulated industries or familiarity with third-party risk regulations.
ā¢ Understanding of IT and cybersecurity concepts (cloud, network, application security).
ā¢ Experience automating TPRM workflows or using GRC platforms (e.g., ServiceNow).
ā¢ Ability to work across teams such as Legal, Procurement, and Technology.
ā¢ Experience managing the full vendor risk lifecycle (onboarding through offboarding).
Apply Now
Apply Now