Senior Risk Analyst, Privacy & Third-Party Risk
$87k - $148kT. Rowe Price
- # Senior Risk Analyst, Privacy & Third-Party RiskApply: Baltimore, MD: Full time: Posted Today: 83546At T. Rowe Price, we identify and actively invest in opportunities to help people thrive in an evolving world. As a premier global asset management organization with more than 85 years of experience, we provide investment solutions and a broad range of equity, fixed income, and multi-asset capabilities to individuals, advisors, institutions, and retirement plan sponsors. We take an active, independent approach to investing, offering our dynamic perspective and meaningful partnership so our clients can feel more confident.We believe doing the right thing for our clients and our associates is good business. With a career at the firm, you can expect opportunities to create real impact at work and in your community. You’ll enjoy resources to support your career path, as well as compensation, benefits, and flexibility to enrich your life. Here, you’ll find a collaborative culture that respects and values differences and colleagues who share a spirit of generosity.Join us for the opportunity to grow and make a difference in ways that matter to you.**Role Summary**The Senior Risk Analyst – Privacy & Third-Party Risk is a Second Line of Defense (2LoD) role and a member of the Global Privacy Office (GPO) and Third-Party Risk Management (TPRM) function. The role provides independent risk oversight, effective challenge, and assurance over first-line activities and outsourced TPRM services, operating with minimal supervision and a high degree of professional judgment.This position is expected to independently manage complex risk assessments, lead oversight activities, identify emerging risk themes, and deliver clear, actionable insights to senior stakeholders and governance committees. The role also supports the effective operation and continuous improvement of the GPO and TPRM programs through risk reporting, data analysis, issue management, technology enablement, and maintenance of core governance and compliance processes.**Responsibilities****Privacy Risk – Global Privacy Office:*** Independently provide 2LoD oversight of privacy risks arising from first-line business activities and serve as a subject matter resource on privacy risk matters.* Lead review and challenge of Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), and privacy risk assessments, including assessments involving new technologies, artificial intelligence, sensitive data, and elevated privacy risk.* Evaluate the design and operating effectiveness of privacy controls and recommend enhancements aligned with regulatory expectations and risk appetite.* Independently review privacy incidents, including root cause analyses and remediation plans, and support reconciliation, trend analysis, governance reporting, and escalation of significant privacy incidents.* Provide technical expertise and support the implementation of privacy and data protection processes, controls, and procedures based on enterprise-wide guidance issued by the Global Privacy Office.* Support Privacy and Security by Design activities by evaluating new technologies, systems, products, and business initiatives; assessing privacy risks and control requirements; and providing risk-based guidance to business and technology stakeholders.* Partner with Technology, Information Security, Legal, Compliance, and business stakeholders to support appropriate implementation of privacy requirements and controls.* Identify opportunities to enhance the Global Privacy Office’s technical capabilities; develop, test, and work with technology teams to deploy such capabilities, including workflow automation, reporting, analytics, and AI-enabled solutions.* Support the maintenance of the firm’s required privacy compliance documentation (e.g., Records of Processing Activities, Transfer Impact Assessments, procedures, guides, training, SharePoint sites), privacy inventories, registers, response materials, and supporting program records.* Support the execution of the privacy compliance monitoring program.* Support recurring privacy governance and compliance activities, including regulatory reporting, metrics, management information, periodic reconciliations, annual recertifications, readiness exercises, and regulatory or operational-impact assessments.* Support privacy-related inquiries, due diligence questionnaires, requests for information, and other stakeholder requests by researching issues, coordinating responses, and maintaining reusable response content.**Third-Party Risk Management:*** Perform quality assurance and effective challenge of third-party risk outputs produced by external service providers and first-line stakeholders.* Independently review and challenge complex or elevated-risk third-party assessments, including due diligence findings, control deficiencies, risk responses, and recommendations to business stakeholders.* Monitor adherence to SLAs, KPIs, and contractual obligations of outsourced TPRM providers and escalate deficiencies as appropriate.* Identify systemic control gaps, concentration risk, and emerging third-party risk trends across the vendor population.* Evaluate and challenge third-party information security, technology, resiliency, privacy, and other risk considerations, partnering with domain subject matter experts where specialized expertise is required.* Contribute to the ongoing development of fourth-party risk governance and oversight practices.* Identify opportunities to enhance TPRM’s technical capabilities; develop, test, and work with technology teams to deploy such capabilities, including AI-assisted quality assurance, workflow automation, risk analytics, and reporting solutions.* Support the maintenance of the firm’s required TPRM compliance documentation (e.g., Policy, Supplier Management Standards, questionnaire templates, frameworks, training, SharePoint sites).* Support TPRM intake and stakeholder inquiries, including coordination and routing of requests, maintenance of supplier and program data, and development of reusable due diligence and client-response content.* Support risk-based prioritization, supplier tiering, and methodology enhancements by testing proposed approaches and analyzing their impact on the third-party population.**Risk Governance, Reporting & Analytics:*** Independently develop and deliver executive-level risk reporting, dashboards, and management information.* Prepare and coordinate recurring management and governance reporting, including metrics, risk trends, control issues, incident information, and other program performance indicators.* Assist with monitoring and reporting emerging AI and technology risks across privacy and third-party risk, contributing to oversight of controls, assessments, and reporting.* Leverage AI-enabled tools and advanced analytics to identify trends, emerging risks, and control weaknesses.* Analyze assessment results, incidents, performance data, and other risk indicators to identify systemic weaknesses, recurring issues, concentration or dependency risks, and emerging themes requiring management attention.* Lead preparation for regulatory examinations, internal audits, and management assurance activities related to privacy and third-party risk oversight.* Maintain accurate, complete documentation in GRC, privacy, and TPRM systems and ensure audit-ready artifacts.* Identify, document, and escalate risk and control deficiencies; assess the adequacy of remediation plans; and monitor significant issues through resolution.**Technology, Process Improvement & Program Enablement:*** Translate business and risk requirements into functional requirements and user stories for GRC, privacy, TPRM, reporting, and workflow solutions.* Perform user acceptance testing and validation of system implementations, enhancements, and fixes; document defects and support retesting through resolution.* Partner with technology, enablement, and program teams to develop and enhance dashboards, reporting, workflow automation, AI-enabled tools, and other capabilities that improve risk visibility and program efficiency.* Identify opportunities to improve Privacy and TPRM frameworks, processes, controls, operating models, and supporting technology, and lead or support implementation of prioritized enhancements.* Support data quality and stewardship activities necessary to maintain reliable program inventories, supplier information, business-process information, reporting, and risk records.**Qualifications****Required:*** Bachelor’s degree in Risk Management, Information Systems, Finance, Business, Law, or a related field.* 5+ years of experience in risk management, GRC, information security, privacy, third-party risk, operational risk, technology risk, or a related oversight function, preferably within financial services, asset management, or another highly regulated industry.* Demonstrated ability to operate independently with minimal guidance in a 2LoD environment or in a risk function requiring independent review, challenge, and escalation.* Strong knowledge of risk management principles and demonstrated expertise in one or more relevant domains, such as privacy, third-party risk, information security, technology risk, operational risk, or compliance, with the ability to develop expertise across both Privacy and TPRM.* Demonstrated experience identifying control weaknesses, assessing risk, developing or challenging remediation plans, and communicating findings to stakeholders.* Strong analytical skills and experience working with risk data, metrics, reporting, or management information.**Preferred:*** Experience leading or independently managing 2LoD privacy or TPRM oversight activities.* Asset management or broader financial services experience.* Experience spanning multiple risk domains, such as operational risk, information security, technology risk, privacy, resiliency, compliance, or third-party risk.* Experience with control testing, risk and control assessments, issue management, root cause analysis, remediation oversight, or similar risk-management activities.* Experience supporting or implementing risk-management frameworks, policies, standards, or program enhancements.* ISO 27001 Lead Implementer, Auditor, or other relevant risk, security, privacy, or third-party risk certifications.* Familiarity with SEC, FINRA, and global regulatory expectations.**Tools & Technology – Preferred*** Advanced experience with GRC, privacy, and TPRM platforms (e.g., Archer, ServiceNow, OneTrust, IBM OpenPages).* Strong proficiency with reporting and analytics tools (e.g., Power BI, advanced Excel).* Practical experience using AI-enabled risk, compliance, or data analytics tools to enhance oversight and reporting (e.g., Microsoft Copilot, ChatGPT Enterprise).* Ability to automate reporting and improve risk visibility.* Experience developing business requirements, user stories, test scenarios, or performing UAT for risk-management technology solutions is preferred.* Familiarity with workflow and automation tools such as Power Automate or similar technologies is a plus.**Certifications****Relevant professional certification or demonstrated equivalent experience preferred. Candidates actively pursuing a relevant certification will also be considered. Examples include:*** Certified Information Privacy Professional (CIPP/US, CIPP/E)* Certified Information Systems Auditor (CISA)* Certified in Risk and Information Systems Control (CRISC)* Certified Third Party Risk Professional (CTPP/CTPRP)* Certified Information Privacy Manager (CIPM)* Certified Information Privacy Technologist (CIPT)**Key Competencies*** Strong independent judgment and risk-based decision-making.* Ability to provide credible, effective challenge at senior levels.* Excellent written and verbal communication skills.* Strong issue management, quality assurance, and governance discipline.* Comfort operating autonomously in a global, regulated environment.* Ability to manage both complex analytical work and recurring operational responsibilities with accuracy and discipline.* Strong stakeholder-management skills and ability to collaborate across business, Technology, Information Security, Legal, Compliance, Procurement, and other risk functions while maintaining appropriate 2LoD independence.* Continuous-improvement mindset with the ability to translate risk-management needs into practical process and technology enhancements.**FINRA Requirements**FINRA licenses are not required and will not be supported for this role.**Work Flexibility**This role is eligible for hybrid work, with up to one day per week from home.**Base Salary Ranges**Please review the job posting for the location of this specific opportunity.$87,000.00 - $148,000.00 for the location of: Maryland, Colorado, Washington and remote workers $95,500.00 - $163,000.00 for the location of: Washington, D.C. $108,000.00 - $185,000.00 for the location of: New York, CaliforniaPlacement within the range provided above is based on the individual’s relevant experience and skills for the role. Base salary is only one component of our total compensation package. Employees may be eligible for a discretionary bonus, which is determined upon company and individual performance.**Commitment to Diversity, Equity,** **and** **Inclusion**At T. Rowe Price, our associates are our greatest asset. We thrive because our company culture is built on inclusion and because we sustain a work environment where associates can bring their best selves to work every day. The backgrounds, talents, and experiences of our global associates allow us to embrace new ideas and perspectives that move our business priorities forward and enable us to deliver strong client outcomes. Here, you can expect equal opportunity and fair and consistent treatment for all. **Benefits**We value your goals and needs, at work and in life. As an associate, you’ll be supported with resources, benefits, and work-life balance so you can thrive in ways that matter to you.Featured employee benefits to enrich your life:* Competitive compensation* Annual bonus eligibility* A generous retirement plan* Hybrid work schedule* Health and wellness benefits, including online therapy* Paid time off for vacation, illness, medical appointments, and volunteering days* Family care resources, including fertility and adoption benefitsLearn more about our benefits.## T. Rowe Price is an equal opportunity employer and values diversity of thought, gender, and race. We believe our continued success depends upon the equal treatment of all associates and applicants for employment without discrimination on the basis of race, religion, creed, color, national origin, sex, gender, age, mental or physical disability, marital status, sexual orientation, gender identity or expression, citizenship status, military or veteran status, pregnancy, or any other classification protected by country, federal, state, or local law.
- J-18808-Ljbffr T. Rowe Price
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Senior Risk Analyst, Privacy & Third-Party Risk in Eastern, KY vacancy
- Description Summary Administers Sunward’s third-party / vendor risk management program, as an individual contributor within the enterprise risk function, providing independent second-line oversight of vendor relationships and ensuring consistent, compliant execution across...SuggestedContract workFor subcontractor
- ...Description JOB SUMMARY Baylor Genetics is seeking a Manager, Third Party Risk to build, lead, and mature our enterprise Third-Party Risk... ...the full vendor lifecycle intake, risk tiering, security and privacy assessment, onboarding, ongoing monitoring, and offboarding for...SeniorFull timeTemporary workFor contractorsLocal areaRemote work
$88.6k - $110.7k
...as occasionally leading internal projects. This role will work closely with project leadership, risk management, internal legal counsel, consultants, clients and third parties to help maintain contract compliance, support commercial issues resolution and organize...SuggestedContract workFor contractorsWork experience placementWork at officeRemote workFlexible hours$500 per month
...encourage you to apply. Your Role As Senior Insider & Data Risk Analyst, you will own insider risk... ...of insider risk, data protection, privacy, and financial services. Reporting... ...across source code, Google, AWS, Azure, third party apps, Slack, and trading and platform...SeniorRemote workHome office- ...We are seeking an experienced Senior Risk Analyst to provide independent risk oversight for our US Refined Products trading business. The ideal candidate will possess deep commercial and operational understanding of the US physical energy markets and be capable of partnering...SeniorWork at office
BGN
Eastern, KY1 day ago - ...Apogee Global RMS is seeking a Risk Analyst to support cross‑domain research, client engagements, and enterprise‑risk assessments. This... ...client‑facing intelligence products. You will work closely with senior advisors, contribute to structured analysis, and help...SeniorRemote work
Apogee Global RMS
Eastern, KY1 day ago - ...of experience in commercial credit, portfolio management, credit risk, underwriting, or related field Demonstrated knowledge of... ...process, please contact us at (***) ***-**** . EEO is the Law ADP Privacy Statement Artificial Intelligence Google Privacy Policy Google Terms...SeniorWork at office
- Parallels is seeking a Senior Manager of Compliance and Risk Management to mature the GRC program, with emphasis on third-party risk, customer RFPs, security questionnaires, and policy development. You will own the risk register, audit readiness, and drive enterprise-wide...SeniorRemote job
- First Command in Fort Worth, TX is seeking a Senior Risk Analyst to support the Compliance and Operational Risk Management Program for its BD/RIA activities. You will identify, assess, monitor, and report regulatory risks while partnering with leaders to strengthen risk...Senior
$135.2k - $181.2k
...touch or with swipe gestures. Senior Product Manager Job ID 10... ...roadmap status, delivery risks, tradeoffs, financial implications... ...where applicable, ensuring third-party capabilities, integrations,... ..., Azure ML) Knowledge of privacy regulations and ethical AI principles...SeniorWork experience placementLocal areaWorldwideThe Walt Disney Company
Eastern, KY1 day ago- Ciena Corporation in Baltimore is seeking a Senior Associate for Global Audit & Advisory. You will execute audits across compliance, third-party risk, SOX, and operations, and assess third-party relationships for risk and control effectiveness. You will collaborate with...SeniorFlexible hours
- ...Certa (certa.ai) is an AI-native third-party risk management platform that unifies the full third... ...compliance, information security, privacy, legal, procurement, finance, and sustainability... .... We've been honored across the analyst and awards landscape, including Top Tech...Live inWork at officeRemote work
Certa
Eastern, KY1 day ago - Transamerica is seeking a Senior Analytical Reporting Analyst for ALM & Investment Risk in a hybrid role based in Baltimore. The role focuses on ALM operations, investment risk reporting, and analysis within a controls framework. You will produce model inputs, support sensitivities...Senior
- Chevron is seeking a Marine Vetting Specialist to manage day-to-day vetting, risk assessment, and approval of third-party vessels to ensure suitability for company operations. The role supports marine risk management, safety of personnel and cargo, and safeguarding corporate...
- Bank of America seeks a Senior Quantitative Finance Analyst for the Alternative Modelling Group in Jersey City. The role focuses on redesigning and deploying next‑generation risk and capital models to enhance risk management across the enterprise. Ideal candidates have...Senior
$46.99k - $112.2k
## Sr. Analyst Information Governance & PrivacyApply: Remote/Hybrid: 00212 - Rhode Island CVS Pharmacy... ...time.**Position Summary** We are seeking a **Senior Analyst** to join the **Technology, Data, Privacy and Third-Party Risk Legal Services (TDPT)** team supporting Health...SeniorHourly payFull timeTemporary workWork at officeLocal areaRemote workWork from home$130k - $150k
...culture. BETA Technologies is seeking an experienced Senior Governance, Risk, and Compliance (GRC) Analyst to serve as a strategic partner in building and... ...through significant maturity transitions Familiarity with privacy regulations (GDPR, CCPA) and data protection...SeniorFull timeTemporary workFor contractorsLocal area$150.7k - $226.1k
...Senior Manager, Regional Security – Americas Organization: Location: Description: About... ...across offices and studio locations. Conduct risk assessments and coordinate security... ...security and emergency preparedness. Manage third-party security providers to ensure quality service...SeniorWork at office2 days per weekThe Security Executive Council
Eastern, KY1 day ago$78.6k - $117.9k
...the contiguous states plus AK. **The opportunity:** In the **Senior Clinical Risk Consultant** role, you will use prior medical knowledge and... ...residing in California, please read our employee California Privacy Policy and Notice.We do not require or administer lie detector...SeniorWork at officeLocal areaFlexible hours$90k - $100k
...0 million permissioned first-party audience members, Informa TechTarget... ...Forecast Tool (AMFT), the Senior Analyst is responsible for developing... ...the link above or any third-party link within this posting... ...third-party website's terms and privacy policy apply #J-18808-Ljbffr...SeniorLocal areaRemote workWork from home3 days per week- ...nearest office location. Aravo Solutions, Inc., provides leading third-party risk management (TPRM), ESG, and vendor lifecycle management... ...management! Position Overview: We are seeking a highly skilled Senior Software Engineer to help design and build our AI agent...SeniorWork at office
$172k - $198k
# Senior Engineer, Cloud SecurityIllumio · illumio.comCategory: Cloud SecurityLocation: Sunnyvale... ...so they can identify and minimize risk in the cloud.You will design your service... ...a background check through an authorized third-party vendor. If you receive any communication...SeniorImmediate start- Senior Security Consultant - Privacy and Assurance Department: Cyber Services and Capabilities Employment Type: Full Time Location: USA Remote - Eastern... ..., and reduce cybersecurity, privacy, and regulatory risk through advisory, assessment, and assurance services. The...SeniorFull timeTemporary workRemote workFlexible hours
- .... Job Description As a Senior Principal Engineer for k0rdent... ...the design of the highest-risk, cross-cutting components and... ...clicking the link above or any third-party link within this posting, you... ...third-party website's terms and privacy policy apply #J-18808-...Senior
Mirantis
Eastern, KY4 days ago - PNC Financial Services Group, Inc. seeks an Independent Technology, Data, and Information Security Risk Advisor Sr (ITRAS) to lead proactive risk management across tech, data, security and governance. The role is based in Pittsburgh, PA or other listed U.S. locations and...Senior
- ...location(s) listed in job posting. Summary : As the Business Risk Oversight Officer within our second line of defense (2LOD), you... ...risk (new/changed products, processes, technology) including Third-Party Risk Management assessments. Coach and advise first line...Senior
First Horizon
Eastern, KY1 day ago $240k
...matters most. Craft3 seeks a senior attorney to lead legal strategy... ...structures, digital privacy, public affairs/lobbying compliance... ...will distinguish material legal risk from manageable business risk... ...and negotiate significant third-party agreements, including leases,...Full timeContract workTemporary workWork at officeRemote workEncore Technologies
Eastern, KY2 days ago- Stanford Health Care is seeking a Clinical Documentation Specialist-Risk Adjustment to perform code audits, abstraction, and education to support accurate risk adjustment coding across medical records and programs. The role requires collaboration with clinicians, review...Senior
- CareSource Information Security GRC Analyst III position manages day-to-day and long-term information security risks, ensuring compliance with risk policies and limits. Requires a Bachelor's degree or equivalent and at least seven years of relevant experience. The role...Senior
$190.9k - $334.1k
...requirements, align on tradeoffs, and communicate capability and risk clearly. Qualifications Experience A demonstrated track record... ...level, including hands‑on delivery of connectivity between third‑party telephony/CCaaS platforms and a hosted or cloud service. Direct...SeniorWork at officeImmediate startRemote workFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Senior Risk Analyst, Privacy & Third-Party Risk. Be the first to apply!
Related searches
- it risk analyst Eastern, KY
- risk officer Eastern, KY
- risk analyst Eastern, KY
- risk consultant Eastern, KY
- senior business development Eastern, KY
- american senior communities Eastern, KY
- senior devops engineer remote Eastern, KY
- senior information technology project manager Eastern, KY
- senior vmware engineer Eastern, KY
- sr electrical engineer Eastern, KY