Hybrid Third-Party Risk & Security Analyst

Clio; Burnaby; Hybrid; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Learning & development

Pay transparency

Equity

Job summary

Clio is seeking a Third-Party Risk Analyst to own the security review of vendor relationships and App Marketplace partnerships. You will read SOC 2 reports, penetration test summaries, and privacy disclosures, advise on risk, and drive reviews through a structured process with IT, Legal, and Privacy teams.

You will escalate real risks, maintain the risk registry, and support renewals, ensuring customer data and brand protection through rigorous documentation and cross-functional collaboration.

Qualifications

• Strong organizational skills and attention to detail.
• Understanding of core security and privacy concepts.
• 2-4 years in security/compliance or vendor risk roles.
• Familiarity with third-party audit artifacts and SOC 2 reports.

Responsibilities

• Review vendor security documentation (SOC 2, pen tests, etc.) and assess privacy compliance.
• Evaluate App Marketplace integration security and privacy submissions.
• Escalate risks and document rationale for stakeholders.
• Maintain the third-party risk registry and support renewals.

Skills

Organizational skills

Security concepts

Privacy concepts

GRC

Vendor risk

SOC 2 familiarity

Audit artifacts

Documentation review

Written communication

Critical thinking

Independent problem solving

GDPR/CCPA awareness

Tools

Vendor management tooling

Job description

Clio is seeking a Third-Party Risk Analyst to own the security review of vendor relationships and App Marketplace partnerships. You will read SOC 2 reports, penetration test summaries, and privacy disclosures, advise on risk, and drive reviews through a structured process with IT, Legal, and Privacy teams.

You will escalate real risks, maintain the risk registry, and support renewals, ensuring customer data and brand protection through rigorous documentation and cross-functional collaboration.