Risk Assessor- Third Party Risk

The Risk Assessor is responsible for performing third‑party risk assessments and evaluating vendor control environments. This role supports the Third Party Risk Management (TPRM) program by identifying risks, documenting findings, and partnering with internal stakeholders and external vendors to ensure appropriate mitigation and compliance with regulatory standards.

• Perform third‑party risk assessments using standardized questionnaires (e.g., SIG, CAIQ) and due diligence reviews.
• Analyze documentation including SOC reports, ISO certifications, and audit artifacts to evaluate control effectiveness.
• Identify and document security, compliance, and operational risks and translate findings into business impacts.
• Develop and track remediation plans in collaboration with vendors and internal stakeholders.
• Monitor vendor risk posture using risk scoring tools and ongoing monitoring processes.
• Support regulatory compliance by validating adherence to applicable laws, regulations, and internal policies.
• Partner with cross‑functional teams including Legal, Procurement, IT, Compliance, and business units.
• Prepare reports and dashboards summarizing risk assessments and vendor risk posture.
• Support internal and external audits by providing documentation and program evidence.
• Contribute to the development and enhancement of third‑party risk management policies, procedures, and tools.
• Maintain knowledge of industry frameworks and standards including ISO 27001, NIST, and SOC reporting.
• Manage multiple assessments and priorities in alignment with established service level agreements.

• 3–5 years of experience in third‑party risk management, vendor risk, or information security within a regulated industry.
• Experience using governance, risk, and compliance (GRC) tools (e.g., One Trust).
• Working knowledge of risk and compliance frameworks such as ISO 27001, NIST, SOC reporting, or similar standards.
• Proficiency with Microsoft Office applications, including Excel, Word, PowerPoint, and SharePoint.
• Bachelor’s degree or equivalent combination of education and relevant work experience.

• Professional certifications related to third‑party risk, information security, or compliance (e.g., CISA, CISM, CRISC).
• Experience using continuous monitoring tools such as Security Scorecard or Bit Sight.
• Experience supporting audits or regulatory reviews.

Pay Range: $79,825.00 - $

EEO