Third-Party Risk Analyst

Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer, professional services company, consumer loan originator and servicer, payments processor, renewable energy solutions, and K-12 and higher education expert. For over 40 years, Nelnet has been serving its customers, associates, and communities. The perks of working at Nelnet go beyond our benefits package.

When you join the Nelnet team, you're part of a community invested in the success of each individual. That support comes through in our work, as we are united by our mission of creating opportunities for people where they live, learn, and work.

The Third-Party Risk Analyst is a contributor within Nelnet's Risk Management team. This role supports risk assessments and ongoing oversight of third-party relationships across the organization. This role helps safeguard Nelnet against key risks by evaluating third-party controls, identifying risk gaps, and recommending remediation aligned with regulatory requirements and internal standards. The Analyst partners closely with senior team members and internal stakeholders to support the third-party risk management lifecycle and contributes to process improvements that support the continued maturity of the Third-Party Risk Management Program.

• Facilitate third-party risk assessments for new and existing third-party relationships, with guidance from senior team members as needed.
• Assist in assessing fourth-party and subcontractor risk exposure for third-party relationships.
• Review and analyze documentation provided by the third-party, document assessment results, identify risk gaps, and recommend remediation actions aligned with Regulatory Requirements and Nelnet standards.
• Deliver reporting, dashboards, and analytics for ongoing oversight, trends, and escalation.
• Support the ongoing maintenance and administration of third-party policies, procedures, and guidelines.
• Partner with internal stakeholders and subject matter experts to support the third-party risk management lifecycle.
• Build and maintain strong cross-functional relationships across business segments to support collaboration throughout the third-party risk management lifecycle.
• Utilize existing tools and technology, including AI, to support process efficiency, and identify opportunities for improvement.
• Maintain awareness of emerging risks and industry trends through continued education and research, sharing relevant insights with the team.
• Participate in and support the delivery of third-party risk management training for Nelnet Associates.

Annual compensation range for this role is $60,000-$70,000 depending on experience.

This position offers a hybrid work option.

Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates living within 30 miles of an office location to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence three days per week.

Please note that we are unable to provide visa sponsorship for this position. To be considered, candidates must already be authorized to work in the United States without the need for current or future sponsorship.

Bachelor’s in technology, risk, business, or related field (equivalent experience may substitute).

• 1-3 years in risk management, third-party risk management, audit, cybersecurity, or compliance.
• Education or certifications in risk, audit, cyber, or project management preferred.
• Familiarity with regulatory requirements and frameworks such as SOC 1/SOC 2, ISO, NIST, and others.

• Ability to review and interpret vendor documentation to support risk assessments and identify control gaps.
• Sound judgment to identify risk gaps and elevate issues appropriately based on risk severity.
• Self-starter with the ability to work independently, communicate clearly, and elevate issues effectively to stakeholders.
• Strong organizational skills to manage concurrent assessments and maintain audit-ready documentation.
• Ability to collaborate effectively with internal…