Similar Jobs
See allSr Third Party Risk Analyst (TPRM)
HealthEquity
US
Cybersecurity
Risk Management
GRC
Senior Analyst, Third Party Risk Management
Smartsheet
Costa Rica
Risk Management
GRC
Information Security
Senior Manager, Security Risk Management
Affirm
Canada
NIST
ISO
GRC
Cybersecurity Analyst, IT GRC
Aprio
US
GRC
Risk Management
Security
Director, Governance, Risk, and Compliance (GRC)
Clover Health
US
Information Security
GRC
Risk Management
Primary Responsibilities:
- Lead the Third-Party Risk Management program, executing full lifecycle assessments and due diligence.
- Review security artifacts like SOC 2 and penetration tests, and manage issue remediation.
- Assess emerging risks including AI and cloud integrations, developing standards and reporting.
Supporting Duties:
- Assist with privacy operations including Data Subject Requests and impact assessments.
- Contribute to cyber GRC activities, risk tracking, and framework implementation.
- Enable security operations, incident response, and awareness training as needed.
Business Partnership:
- Serve as a trusted risk advisor to stakeholders, reducing operational burden.
- Partner with Legal, Procurement, and Technology teams to deliver risk-informed solutions.
- Escalate material risks early and frame issues in clear business terms for decision-making.
Vuori
Vuori designs athletic apparel built for fitness and everyday life, inspired by an active coastal California lifestyle. The company is a high-energy, fast-paced organization that values personal growth and success, fostering a fun and enthusiastic work environment.