Overview
The TPRM / Supplier Assurance Analyst will play a crucial role within the Risk function of an established organization, focusing on third-party risk management and supplier assurance. The contractor will collaborate with various stakeholders, including Compliance, Information Security, and Legal teams, to assess supplier risks, review documentation, and ensure that remediation actions are implemented effectively. This position offers an opportunity to enhance supplier risk assessment processes and contribute to the organization's overall risk management strategy.
Responsibilities
- Conduct third-party and supplier risk assessments, including inherent and residual risk assessments.
- Complete supplier due diligence and review risk questionnaires covering security, privacy, financial, operational, and compliance risks.
- Review documentation including SOC 2 reports, ISO certifications, and business continuity plans.
- Identify, document, and track supplier risk findings and remediation actions.
- Support the onboarding and ongoing assessment of new and existing suppliers.
- Maintain supplier risk classifications and TPRM records.
- Monitor supplier relationships through periodic reassessments and ongoing risk monitoring.
- Produce risk reporting and presentations for management and governance forums.
Requirements
- 2+ years' experience in Third Party Risk Management, Supplier Assurance, Vendor Risk, or Information Security Risk.
- Hands-on experience conducting third-party/supplier risk assessments and due diligence.
- Understanding of information security, privacy, and operational risk.
- Familiarity with frameworks such as NIST, ISO 27001, SOC 2, or COBIT.
- Strong skills in Excel for risk tracking, analysis, and reporting.
- Experience using GRC or TPRM platforms such as ServiceNow, OneTrust, or Archer.
- Proficient in producing risk reports and management information using Excel and PowerPoint.
- Bachelor's degree in Business, Finance, Information Security, Risk Management, or related field is advantageous.