Third Party Risk Analyst

DescriptionJob TitleThird-Party Risk AnalystCompany OverviewA leading global professional services organization in the legal and business advisory space, headquartered in Los Angeles, California, is seeking a Third-Party Risk Analyst to join its growing IT Security team. The organization is known for its commitment to protecting sensitive client data and maintaining robust security standards across modern cloud and SaaS environments. With a strong global presence, the firm emphasizes innovation, collaboration, and operational excellence.Role SummaryThe Third-Party Risk Analyst plays a critical role in safeguarding the organization’s ecosystem by evaluating the security posture of external vendors and partners. This role focuses on conducting technical risk assessments across SaaS platforms, cloud environments, and hosted services while ensuring compliance with industry standards and client expectations. Based remotely, this position partners closely with IT security leadership and cross-functional stakeholders to mitigate risk and strengthen third-party security practices.Key ResponsibilitiesConduct technical security assessments of third-party vendors across SaaS platforms, cloud infrastructure, and hosted servicesEvaluate vendor security controls, including access management, encryption, and data protection practicesReview vendor documentation such as SOC 2 reports, ISO certifications, and security testing resultsAssess cloud environments (AWS, Azure, GCP) for security configurations, segmentation, and identity controlsAnalyze API security, including authentication methods, data transmission, and vulnerability risksEvaluate DevSecOps maturity, including secure development practices and CI/CD pipeline securityTrack and manage vendor risk findings, ensuring remediation efforts are completed in a timely mannerSupport client-facing security activities, including questionnaires, audits, and compliance reviewsCollaborate with internal stakeholders to align vendor security with regulatory requirements (e.g., GDPR, CCPA)Prepare risk reports and present key findings to leadership and cross-functional teamsCompensation & Benefits$120,000 – $140,000 with discretionary bonusDiscretionary bonus eligibilityComprehensive benefits package including medical, dental, and vision coverageFlexible spending accounts (FSA) and 401(k) with profit sharingPaid time off including vacation, sick leave, and personal daysAdditional DetailsRemote (must reside in proximity to a supported office region)Core hours: 8:00 AM – 4:00 PM PT (7-hour workday)Occasional travel may be required for vendor assessmentsCollaborative environment with direct exposure to senior leadership and security stakeholdersRequirementsRequired QualificationsBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)Minimum 3+ years of experience in a technical security or third-party risk roleHands-on experience with cloud security (AWS, Azure, or GCP)Experience assessing SaaS applications and vendor security controlsStrong understanding of security frameworks such as NIST, ISO 27001, CIS Benchmarks, and SOC 2Familiarity with identity and access management (IAM), SSO, and role-based access controlsExcellent communication skills with the ability to convey technical concepts to diverse audiencesStrong organizational and analytical skills in a fast-paced environmentPreferred Qualifications (Nice-to-Haves)Professional services or legal industry experienceSecurity certifications such as CISSP, CISA, CCSP, CRISC, or similarExperience with API security, DevSecOps, and secure software development practicesKnowledge of data privacy regulations and cross-border data handling requirementsExperience supporting client audits and security questionnairesJob typePerm