GRC Analyst, Third-Party Risk Management

About This Opportunity

We are representing a confidential technology client in their search for a GRC Analyst focused on Third-Party Risk Management. This role sits at the intersection of security, compliance, and business operations, ensuring vendor relationships are assessed and monitored effectively as the organization scales.

Our client operates a global platform serving critical industries, and this position will play a key role in building automated, scalable processes for third-party risk assessment. You'll work closely with procurement, legal, privacy, and security teams to identify, document, and mitigate vendor risks throughout the entire vendor lifecycle.

Responsibilities

• Provide programmatic updates and communicate third-party and technical risk to Information Security leadership
• Drive automation and efficiency in the third-party risk management program using platforms such as Zip and Vanta, as well as building native solutions
• Ensure security reviews and reassessments scale effectively with company growth
• Partner with Procurement, Legal, and Privacy teams to manage vendor risks throughout the vendor lifecycle
• Support the creation and maintenance of risk registers, compliance inventories, and control mappings across internal and external systems
• Conduct vendor risk assessments, including reviewing security certifications, penetration tests, and policies
• Collaborate with systems teams to implement security controls across diverse platforms including Okta, Slack, Salesforce, and internal tooling
• Translate complex technical findings into clear business risks for non-technical stakeholders

What We're Looking For

Required qualifications:

• 2-4 years of experience in governance, risk, and compliance
• Experience implementing or maintaining vendor-risk programs
• Experience performing security and maturity assessments
• Track record supporting risk registers, compliance inventories, and control mappings
• Ability to work with systems teams on security control implementation across diverse platforms
• Professional experience coordinating with external auditors, engineering teams, business stakeholders, and senior leadership on procurement and compliance activities
• Experience conducting vendor risk assessments and reviewing security documentation
• Strong understanding of vendor integration risks and permission scoping across SaaS platforms (Slack, Google Workspace, Salesforce)
• Ability to communicate technical requirements clearly to non-technical audiences

Preferred qualifications:

• Experience with NIST Cybersecurity Framework, SOC 2, ISO 27001, or similar frameworks
• Experience creating workflows through automation and AI assistance
• Familiarity with GRC and procurement platforms such as Zip and Vanta
• Experience managing high volumes of vendor requests and competing priorities
• Prior assessment experience in the Software-as-a-Service industry

How We Work With You

Get A Job.ai serves as your trusted recruitment partner throughout this process. When you apply through our platform at getajob.ai, one of our experienced recruiters will screen your application and work with you to understand your background and career goals. If there's a strong match, we'll submit your profile to our client for consideration. Please note that all communication should flow through Get A Job.ai—candidates should not contact the client organization directly during the recruitment process.

Pay

Compensation details will be discussed with qualified candidates during the screening process.

Equal Employment Opportunity: Get A Job.ai is committed to fair and equitable recruitment practices. We consider all qualified applicants without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability, age, or other protected characteristics.