Analyst, Third-Party Risk Management, TPRM

• Support the intake and triage of new and existing third-party requests through TPRM systems and workflows
• Assist with the coordination and execution of inherent risk assessments and due diligence activities for vendor products and services
• Review submitted questionnaires, supporting documentation, and risk artifacts for completeness and quality before escalation or SME review
• Track required documentation, outreach, and follow-up activities to ensure assessments move through the process within established service levels
• Partner with business stakeholders and SMEs to gather information for third-party risk assessments
• Maintain accurate records in TPRM systems of record, including risk ratings, findings, approvals, remediation actions, and lifecycle status updates
• Support remediation tracking and follow-up with internal stakeholders and third parties to drive timely issue resolution
• Assist with ongoing monitoring activities, including reassessment scheduling, documentation refreshes, and evidence collection
• Support standard and ad hoc reporting for management, governance committees, audits, and regulatory inquiries
• Identify data quality issues, process gaps, and operational improvement opportunities, and upscale as appropriate
• Assist in maintaining TPRM documentation
• Build effective working relationships with internal stakeholders and provide timely, professional support regarding TPRM requirements and process questions
• Maintain a working understanding of the TPRM program, including relevant policy, procedures, systems, and governance expectations
• Stay current on industry trends, regulatory expectations, and best practices related to third-party risk management
• Support special projects and broader TPRM program initiatives as assigned by management

Requirements

• Minimum of 1–3 years of experience in third‑party risk management, supplier/vendor management, procurement, compliance, operational risk, audit, cybersecurity, or a related discipline
• Familiarity with risk management concepts, control environments, and due diligence practices
• Experience working with workflow, procurement, GRC, or TPRM platforms
• Ability to manage multiple tasks, competing priorities, and deadlines in a fast‑paced environment
• Strong attention to detail and ability to work with large amounts of data and documentation accurately
• Demonstrated analytical and problem‑solving skills with a structured approach to issue identification and resolution
• Comfortable working with ambiguity and adjusting priorities based on business need and leadership direction
• Strong written and verbal communication skills, with the ability to interact effectively with internal stakeholders and third parties
• Self‑motivated individual who demonstrates initiative, reliability, flexibility, and accountability
• Proficiency in Microsoft Office applications, particularly Excel and PowerPoint
• Familiarity with third‑party risk domains such as information security, privacy, business continuity, legal, compliance, or financial risk is a plus
• Experience in financial services or a highly regulated environment preferred

Core Competencies

Demonstrates expertise in Third-Party Risk Management (TPRM) processes, including risk assessments, due diligence, and documentation management. Proficient in maintaining accurate records and supporting compliance within a highly regulated environment.

Highest-signal resume keywords

• Third-Party Risk Management
• Risk Assessment
• Due Diligence
• Microsoft Excel
• Analytical Skills

Hard Skills

• Risk Management Concepts
• Control Environments
• Documentation Management
• Data Analysis
• Issue Resolution

Soft Skills

• Attention to Detail
• Communication Skills
• Self-Motivated
• Problem-Solving Skills
• Flexibility

Industry Keywords

• Supplier Management
• Operational Risk
• Compliance
• Cybersecurity
• Financial Services

Tools & Technologies

• TPRM Platforms
• GRC Platforms
• Procurement Systems
• Microsoft PowerPoint