Remote Third Party Risk Analyst
This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Third Party Risk Analyst - REMOTE. In this role, you will play a pivotal part in safeguarding our ecosystem from third-party security risks. You will assess the posture of high-risk vendors, review their security attestations and contracts, and ensure compliance with auditing and regulatory standards. Your contributions are integral to preventing breaches and maintaining customer trust, making this role crucial in our fast-paced environment where agility and thoroughness are both key.
Accountabilities
• Conduct vendor risk reviews and evaluate third-party attestations such as SOC 2, ISO 2700x, and other security certifications.
• Analyze vendor contracts and identify potential risk clauses or data security implications.
• Support annual high-risk vendor audits and maintain documentation to meet compliance requirements.
• Collaborate cross-functionally with Legal, Procurement, Engineering, and Compliance teams to assess risk exposure and mitigation plans.
• Provide technical insight into vendor integrations, authentication, and infrastructure security controls.
Requirements
• 5–8+ years of experience in information security, vendor risk management, or related technical risk roles.
• Strong understanding of security frameworks and certifications (SOC 2, ISO 2700x, NIST, etc.).
• Familiarity with authentication, disaster recovery, and infrastructure security concepts.
• Ability to interpret and challenge vendor-provided attestations and control summaries.
• Comfort reviewing contracts and identifying clauses impacting data handling or access control.
• Excellent communication and analytical skills, with the ability to ask critical questions and present findings clearly.
• Drive and proactivity – everyone here is a builder and executor.
Benefits
• Flexible remote working environment.
• Collaborative team culture focused on innovation.
• Opportunities for professional development and growth.
• Health and wellness benefits.
• Equal opportunity employer with diverse workplace.
Why Apply Through Jobgether?
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Original job Remote Third Party Risk Analyst posted on GrabJobs ©. To flag any issues with this job please use the Report Job button on GrabJobs.
Apply Now
Apply Now
Accountabilities
• Conduct vendor risk reviews and evaluate third-party attestations such as SOC 2, ISO 2700x, and other security certifications.
• Analyze vendor contracts and identify potential risk clauses or data security implications.
• Support annual high-risk vendor audits and maintain documentation to meet compliance requirements.
• Collaborate cross-functionally with Legal, Procurement, Engineering, and Compliance teams to assess risk exposure and mitigation plans.
• Provide technical insight into vendor integrations, authentication, and infrastructure security controls.
Requirements
• 5–8+ years of experience in information security, vendor risk management, or related technical risk roles.
• Strong understanding of security frameworks and certifications (SOC 2, ISO 2700x, NIST, etc.).
• Familiarity with authentication, disaster recovery, and infrastructure security concepts.
• Ability to interpret and challenge vendor-provided attestations and control summaries.
• Comfort reviewing contracts and identifying clauses impacting data handling or access control.
• Excellent communication and analytical skills, with the ability to ask critical questions and present findings clearly.
• Drive and proactivity – everyone here is a builder and executor.
Benefits
• Flexible remote working environment.
• Collaborative team culture focused on innovation.
• Opportunities for professional development and growth.
• Health and wellness benefits.
• Equal opportunity employer with diverse workplace.
Why Apply Through Jobgether?
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Original job Remote Third Party Risk Analyst posted on GrabJobs ©. To flag any issues with this job please use the Report Job button on GrabJobs.
Apply Now
Apply Now