Senior Security Third Party Risk (TPRM) Analyst

Senior Information Security GRC Analyst We are looking for a dynamic Senior Information Security GRC Analyst to support IT and InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team. In addition, this role will collaborate with architecture, legal, compliance, and privacy as part of our Third Party Risk Management (TPRM) process. The role will help review risk assessments for customers/vendors, data flow diagrams, architecture diagrams, certifications, questionnaires, etc. Responsibilities Collaborate with IT, InfoSec, and within the GRC team to mature the compliance process. Review vendor due diligence documentation, including SOC reports, ISO certifications, penetration testing reports, policies, and security questionnaires. Evaluate supplier control environments against established risk management standards and frameworks. Document risk findings and communicate recommendations to business stakeholders. Execute risk assessments of third‑party vendors. Mentor Junior Security Analysts, and work with them to evaluate and remediate complex security incidents. Responsible for generation and continued delivery of relevant KPIs and metrics. Provide feedback on solutions and processes to mature overall capabilities. Impart expertise on the OneTrust environment and security best practices to others on the team. Qualifications 5+ years of hands‑on experience in cybersecurity/risk management. Experience reviewing SOC 1, SOC 2 reports and ISO 27001 certifications. Experience reviewing security questionnaires, business continuity and disaster recovery plans, vendor contracts and security requirements. Understanding of information security best practices around confidentiality, integrity and availability. Cloud experience in at least one cloud provider. Understanding of applicable laws and regulations, including GDPR, CCPA, PCI‑DSS, SOC 2, ISO, and FedRAMP. Understanding of the standards for the processing practices of third‑party management. Understanding of technology domains including governance, risk management, security, privacy, and information technology and business continuity. Preferred Experience Certifications: CRISC, Security+, CISSP, CISM, CCSP, CISA, Azure. Knowledge of OneTrust security/GRC products. Salary Range $104,325—$156,488 USD (For California, Colorado, Connecticut, Nevada, New York, Rhode Island, and Washington based candidates; salary determined by location, job‑related skills, work experience, and relevant education and/or training. The role may also be eligible for discretionary bonuses, equity, and/or commissions, as well as benefits.) Location We are embracing an office‑first culture, encouraging three days a week in office for most roles, with meaningful opportunities to collaborate and celebrate in person. Each role may have specific requirements or flexibility depending on the scope of the position, so we encourage you to verify this with your recruiter during your first interview. Benefits As an employee at OneTrust, you will receive comprehensive healthcare coverage, flexible PTO, equity RSUs, annual performance bonus opportunities, retirement account support, 14+ weeks of paid parental leave, career development opportunities, company‑paid privacy certification exam fees, and much more. Specific benefits differ by country. For more information, talk to your recruiter or visit onetrust.com/careers. Equal Employment Opportunity OneTrust provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by local laws. #J-18808-Ljbffr