Third Party Risk Management (TPRM) Analyst

The Third Party Risk Management (TPRM) Analyst supports the end-to-end management of the third-party risk management process by managing risk across our vendor landscape. This role reports to the TPRM Manager and will oversee the onboarding of new suppliers as well as continuous monitoring and reassessments of critical and high-risk vendors. This role will partner closely with other procurement teams, the corporate risk management team, legal, and risk domain owners across the organization to ensure assessments are completed and risks remediated.

This position is ideal for someone early in their career, interested in a career in GRC, and is a highly organized, analytical, and stakeholder-oriented professional who thrives in a fast-paced, build-from-scratch procurement environment.

Key Responsibilities

• Support the onboarding and reassessment of third-party vendors under procurement's purview by gathering information, documenting risks, facilitating stakeholder discussions, evaluating inherent and residual risk, and tracking follow-up actions and remediation activities.
• Execute standardized third-party risk assessments under the direction of senior team members.
• Track assessment status and follow up with risk domain owners to ensure timely submissions.
• Document risk findings and ratings, including inherent and residual risk scores.
• Assist in maintaining documentation of procedures, templates, and guidelines.
• Support internal and external audits of the vendor risk program.
• Support Procurement efforts to bring automation and AI-enabled tools into the vendor risk program and incorporate industry-leading practices.