Third Party Risk Management Analyst

Position Title: Third Party Risk Management Analyst

Remote role but able to go onsite in Maitland, FL - Big Plus


Position Title: Information Security Analyst


Location: Maitland, FL (preferred) or remote


Department: Chief Risk Officer (CRO)


Reports to: VP, Information Security Officer

Reports to: VP Third Party Risk Management


General Responsibilities


The Third-Party Risk Management (TPRM) Analyst is responsible for supporting the identification, assessment, monitoring, and mitigation of risks associated with the use of third-party vendors and service providers. This role involves collaborating with various internal stakeholders to ensure that all third-party relationships align with the company's risk appetite, policies, and regulatory requirements. The TPRM Analyst will help safeguard the organization by ensuring that risks from third-party vendors are properly managed and mitigated.


Key Responsibilities and Accountabilities
• Support the third-party risk management program through daily activities, including due diligence, risk assessment and timely follow-up.
• Conduct new third party onboardings, process contract renewals and terminations.
• Conduct periodic due diligence on existing vendors/partners, engaging Subject Matter Experts in providing required documentation in a timely manner. Where necessary, escalate requests that are not responded to in a timely manner.
• Ensure all steps of the third-party risk management program are processed and documented correctly and thoroughly.
• Manage third party risk management register to ensure tracking and gathering of all data and documents.
• Assist in maintaining a database of pertinent risk information pertaining to third parties and communicating this data via consistent reporting.
• Track third party risk management KRIs and provide reporting, presentations and other documentation required to support TPRM function when requested.
• Continuously monitoring vendor risk even after the vendor contract is executed (e.g., monitoring performance levels and periodically requesting and analyzing current due diligence)
• Maintaining a database of risk information pertaining to third parties and communicating this data via consistent reporting to senior leadership as required.
• Ensure enterprise-wide needs for due diligence, risk assessment and continuing vendor monitoring are being accomplished.
• Troubleshoot all vendor problems and escalate to management as required.
• Interact with peers across the organization to ensure compliance with TPRM processes.