Third-Party Risk Management Analyst

Third-Party Risk Management Analyst

About the role:

· Lead Customer’s Third‑Party Cyber Risk Management initiatives across the full project lifecycle, including planning, execution, stakeholder coordination, reporting, and ongoing monitoring

· Perform comprehensive cybersecurity risk assessments of third‑party partners, identify security gaps, and deliver clear, actionable assessment reports with minimal supervision

· Execute standardized inherent risk assessments and validate the accuracy of risk ratings, control evaluations, and remediation plans

· Track, document, and follow up on third‑party risk remediation activities to ensure timely closure and alignment with Customer risk tolerance

· Leverage Governance, Risk, and Compliance (GRC) platforms and AI‑driven automation to streamline assessment workflows, reporting, and evidence collection

· Partner with cybersecurity, procurement, legal, internal audit, and business stakeholders to support consistent and scalable third‑party risk practices

· Support continuous improvement of TPCRM processes by identifying inefficiencies and recommending process or tooling enhancements

· Provide cybersecurity risk education to internal teams and third‑party partners, promoting secure behaviors and awareness of emerging threats

· Prepare metrics, dashboards, and summaries to support leadership visibility into third‑party cyber risk posture

· Utilize AI platforms and industry data to optimize assessment of workflows and enable greater focus on mitigating identified risks.

Key responsibilities:

· Cybersecurity Fundamentals: Demonstrates a solid understanding of security controls, threats, and risk concepts

· Risk Assessment & Analysis: Ability to identify, assess, and document third‑party cyber risks and control gaps

· Project Management: Effectively plans, tracks, and executes work across multiple concurrent initiatives

· Process Improvement: Identifies opportunities to streamline workflows and improve operational efficiency

· Stakeholder Collaboration: Works effectively with cross‑functional teams and external partners

· Communication: Clearly communicates technical risk information to both technical and non‑technical audiences

· Attention to Detail: Produces accurate, well‑documented assessments and maintains reliable risk records

· AI-Driven Risk Mitigation: Leverages AI platforms and industry partnerships to accelerate risk identification and maximize time spent on executing risk reduction.

Required Qualifications:

· Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience

· 3–5 years of experience in cybersecurity, third‑party risk management, IT risk, compliance, or a related discipline

· Foundational understanding of cybersecurity principles, risk assessment methodologies, and common security control frameworks

· Experience supporting projects or initiatives that require coordination across multiple stakeholders

· Strong written and verbal communication skills, with the ability to clearly document risks and recommendations.

Compensation:

$60/hr - $65/hr

This is the targeted compensation range for this role. Please note that this range is provided as a guideline and the final offer will be based on several factors, including but not limited to, skillset and competencies, level of experience, education, certifications, and location.

Benefits:

We offer a comprehensive benefits package including medical, dental, vision, life, and disability insurance; 401(k)

Work Authorization:

Work sponsorship is not available for this position. Applicants must be authorized to work in the United States without sponsorship.

Equal Employment Opportunity:

Zillion Technologies is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, veteran status, sexual orientation, gender identity, or any other characteristic protected by applicable federal, state, or local law.