Third Party Risk Analyst

Title: Third Party Risk Analyst

Location: Philippines, Flexible

Role Overview

The Third-Party Risk Analyst is a key member of the Information Security team and reports directly to the Third-Party Risk Program Manager. This role is responsible for supporting the end-to-end Third-Party Risk Management (TPRM) lifecycle, including intake, due diligence, risk assessments, issue tracking, and ongoing monitoring.

Key Responsibilities

• Manage third-party risk management workflow, including reviewing new requests, tracking in-progress assessments, and driving assessments to completion.
• Conduct initial and ongoing third-party security risk assessments, including control evaluation, risk rating, and documentation of residual risk.
• Administer and maintain the third-party risk assessment tooling (UpGuard), including vendor onboarding, questionnaire distribution, response tracking, evidence collection, and workflow/status management....