Analyst Third-Party Risk Management

Job Description

Job Description

Description:

Paylocity is an award-winning provider of cloud-based HR and payroll software solutions, offering the most complete platform for the modern workforce. The company has become one of the fastest-growing HCM software providers worldwide by offering an intuitive, easy-to-use product suite that helps businesses automate and streamline HR and payroll processes, attract and retain talent, and build a strong workplace culture. 

While traditional HR and payroll providers automate basic HR processes such as payroll and benefits administration, Paylocity goes further by developing tools that HR and businesses need to compete for talent and deliver against the expectations of the modern workforce.

We give our employees what they need to succeed, including great benefits and perks! We offer medical, dental, vision, life, disability, and a 401(k) match, as well as perks that support you, your family, and your finances. And if it’s career development you desire, we provide that, too! At Paylocity, people matter most and have always been at the heart of our business.

When you feel like you belong, work is no longer work – it's personal. At Paylocity, we believe better employees lead to better companies. Workplaces and cultures that care will build the future, and at Paylocity, we’re doing just that. Join us as we change the future and transform your career!

There are jobs and then there are careers . Since 1997, Paylocity has been hiring talented people, giving them big challenges, and providing the right resources to help them succeed. Our award-winning culture ensures all employees feel truly welcome, appreciated, and free to be themselves. While other companies talk about it, we make it happen. Join Paylocity and launch your career!

Fully Remote (U.S. Only): This is a fully remote position, allowing you to work from home or location of record within the U.S. with no in-office requirements.  You must be available five days per week during designated work hours.  The work arrangement for this role is subject to change based on business needs and individual performance. This may include adjustments to on-site requirements or schedule expectations, as necessary. 

Position Overview  

The Analyst, Third-party Risk Management supports the organization’s enterprise and third-party risk management programs with a primary focus on maintaining vendor data integrity, executing standardized risk activities, and tracking risk issues and remediation efforts. This role works under the guidance of senior analysts and managers to ensure third-party risks are identified, assessed, and monitored in alignment with organizational policies and frameworks. 

The analyst is responsible for day-to-day operational tasks within the third-party risk lifecycle, including vendor onboarding support, inventory maintenance, risk assessment completion, and issue remediation. This role is well-suited for an early-career professional developing foundational risk management and vendor governance skills. 

Primary Responsibilities   

The following outlines the core duties of the role; additional responsibilities may be assigned as needed. To perform this job successfully, an individual must be able to perform each essential duty effectively. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 

• Support the end-to-end third-party / vendor lifecycle process, including onboarding, periodic reviews, and offboarding activities. 
• Support coordination with procurement, legal, and business stakeholders to ensure compliance with third-party governance requirements. 
• Maintain and update the third-party / vendor inventory within the risk management system. 
• Ensure vendor data is complete, accurate, and aligned with organizational standards 
• Perform routine data quality checks and resolve discrepancies in collaboration with stakeholders. 
• Assist in categorizing vendors based on inherent risk and business criticality. 
• Execute standardized third-party risk assessments under the direction of senior team members. 
• Collect and validate risk information from vendors and internal stakeholders. 
• Document risk findings, including basic risk ratings and rationale. 
• Track assessment completion status and follow up with stakeholders to ensure timely submissions. 
• Monitor and log third-party risk incidents and issues in the risk system. 
• Track remediation actions and follow up with responsible parties to ensure progress. 
• Support the development of basic risk reporting and dashboards for internal stakeholders. 
• Help gather data for Key Risk Indicators (KRIs) and other risk metrics. 
• Contribute to routine reporting cycles by validating data and preparing summaries. 
• Support enhancements to third-party risk management processes and tools. 
• Participate in testing and workflow updates within the ERM/TPRM system. 
• Assist in maintaining documentation of procedures, templates, and guidelines. 

Education and Experience 

• Bachelor’s degree in business, finance, risk management, or related field (or equivalent experience). 
• 2+ years of experience in risk management, vendor management, compliance, or related area. 

Knowledge, Skills, and Abilities  

• Basic understanding of third-party risk concepts and vendor governance practices. 
• Strong attention to detail and data accuracy. 
• Ability to organize and track multiple tasks and deadlines. 
• Proficiency with Microsoft Excel and basic data reporting tools. 
• Strong written and verbal communication skills. 
• Ability to work collaboratively in a team environment and follow direction. 
• Eagerness to learn risk frameworks, assessment methodologies, and vendor management processes. 

Physical requirements  

• Ability to sit for extended periods: The role requires sitting at a desk or workstation for long periods, typically 7-8 hours a day. 
• Use of computer and phone systems: The employee must be able to operate a computer, use phone systems, and type. This includes using multiple software programs and inquiries simultaneously. 

Paylocity is an equal-opportunity employer. Paylocity is committed to the full inclusion of all individuals. We recruit, train, compensate, and promote regardless of race, religion, color, national origin, sex, disability, age, veteran status, and other protected status as required by applicable law. At Paylocity, we believe diversity makes us better. 

We embrace and encourage our employees’ differences in age, culture, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion or spiritual belief, sexual orientation, socio-economic status, veteran status, and other characteristics that make our employees unique. We actively cultivate these differences through our employee resource groups (ERGs), employee experiences, perspectives, talents, and approaches to drive innovation in the software and services we provide our customers. 

We comply with federal and state disability laws and make reasonable accommodations for applicants and employees with disabilities. To request reasonable accommodation in the job application or interview process, please contact View email address on ziprecruiter.com. This email address is exclusively designated for such requests, aligning with federal and state disability laws. Please do not send resumes to this email address, as they will be removed.

The base pay range for this position is $57,300 - $82,000 /yr; however, base pay offered may vary depending on job-related knowledge, skills, and experience. This position offers a full range of benefits outlined here. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed. Base pay information is based on market location. Applicants should apply via

Your personal data will be processed for recruitment purposes in accordance with our Notice of Privacy Practices for Job Applicants and applicable data protection laws.