GRC Analyst (Third Party Risk)
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.1
Reclaim your time by letting our AI handle the grunt work of job searching.
We continuously scan millions of openings to find your top matches.
Overview
Job Description
As part of ongoing programmatic service offerings to a strategic client, SysLogic is seeking to add a Third-Party Risk & Governance, Risk, and Compliance (GRC) Analyst to join our growing Information Security team. This role will be pivotal in strengthening the organization's third-party risk management program while ensuring overall compliance with regulatory and industry standards. The ideal candidate will be detail-oriented, highly organized, and a strong communicator with experience assessing vendor security risk, third-party compliance activities, and participating in the enhancement of the GRC processes.
The successful candidate will have a proven track record in conducting vendor security assessments, providing third-party analysis, and supporting compliance efforts aligned with HITRUST, SOC 2, GDPR, HIST, and ISO/IEC 27001. Experience leveraging tools such as ServiceNow for risk tracking, and documentation is highly desired.
Key Responsibilities:
Analyze Third-Party Risk Management (TPRM) Assessments:
- Execute the third-party risk assessments which may include vendor onboarding, due diligence, risk assessments, remediation, and ongoing monitoring.
- Collaborate with internal stakeholders and senior security professionals to ensure vendor contracts align with security and compliance requirements.
Conduct Vendor Security Assessments:
- Evaluate vendor controls against frameworks such as HITRUST, SOC 2, ISO 27001, and GDPR.
Perform GRC Activities:
- Support internal and external audits involving third-party risk components and regulatory frameworks.
- Maintain alignment with industry standards and evolving regulations impacting vendor risk and compliance.
Enhance GRC Technology & Reporting:
- Utilize platforms such as ServiceNow GRC to track vendor risk assessments, issues, and remediation plans.
- Partner with team to improve assessment processes and reporting.
Risk Analysis & Reporting:
- Provide regular dashboards and reports summarizing vendor risk posture, compliance gaps, and remediation progress.
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.
