Third-Party Risk Analyst

Johnson & Johnson; Bogotá; Presencial; COP 40.000.000 - 70.000.000; Jornada completa

Descripción de la vacante

The Third-Party Risk Analyst at Johnson & Johnson will execute third-party due diligence within the global risk management program, establishing procedures, controls, and risk mitigation strategies.

You'll collaborate with regional teams across LATAM, EMEA, NA, and ASPAC, maintain documentation, and support compliance projects, audits, and training initiatives to strengthen enterprise-wide risk controls.

Formación

• Bachelor's degree in industrial engineering, business administration, economics, audit, risk management, LAFT/OFAC or compliance certification.
• 3+ years of related experience in compliance, risk management or audit.
• Excellent written and oral communication and ability to interact with senior leaders.

Responsabilidades

• Perform third-party due diligence and risk assessments.
• Maintain records and support governance, policies, and training.

Conocimientos

Communication skills

English language

Analytical skills

Interpersonal skills

MS Office

Educación

Bachelor's degree in Industrial Engineering

Bachelor's degree in Business Administration

Bachelor's degree in Economics

Compliance Certification

Herramientas

MS Office

Descripción del empleo

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function

Legal & Compliance

Job Sub Function

Enterprise Compliance

Job Category

Professional

All Job Posting Locations

Bogotá, Distrito Capital, Colombia

Job Description

Position Title

Third-Party Risk Analyst

Supervisor Title

Enterprise Compliance Sr. Specialist

Department Name / Number

GS Procurement- Third Party Risk

Physical Location of Position

Bogota

Geographic Scope of Responsibility

Global / Americas

Position Summary

The Third-Party Risk Analyst will perform Third party due diligence process as part of the Third-party risk management program. This role establishes and maintains procedures and controls to drive improvement initiatives supporting the daily operational activities of the team focusing on Third party risk. The analyst will also participate on ad hoc compliance projects and maintain procedures and controls to mitigate risk management, communications, audits, training, process capability/process improvement, and compliance general support.

Major Duties & Responsibilities

Approximate Percentage of Time

80%

Third Parties Due Diligence

• Perform third-party sanctions screening, risk assessments, and enhanced due diligence activities to identify, evaluate, and mitigate third-party risk exposures.
• Conduct daily monitoring and review of screening alerts, assessing potential compliance and enterprise risk impacts and escalating high-risk findings in accordance with established governance frameworks.
• Support supplier master data governance initiatives, ensuring data integrity, risk transparency, and adherence to enterprise control requirements.
• Execute risk-based third-party due diligence processes prior to onboarding and throughout the lifecycle of existing third parties, ensuring risk levels are appropriately assessed, documented, and managed.
• Perform data quality reviews, risk control validations, and database reconciliations to strengthen the reliability, completeness, and accuracy of information used for risk-based decision-making.
• Design, enhance, and maintain risk awareness, communication, and training programs that promote a culture of compliance, risk ownership, and alignment with legal and regulatory requirements.
• Collaborate with cross-functional stakeholders to develop, update, and strengthen policies, procedures, desktop procedures (DTPs), and work instructions, ensuring alignment with evolving risk landscapes, regulatory expectations, and internal control frameworks.
• Identify opportunities to strengthen risk controls, improve monitoring capabilities, and drive process optimization, automation, and innovation to enhance operational resilience and risk mitigation.
• Partner closely with regional and global stakeholders to assess emerging risks, promote consistent risk management practices, and support enterprise-wide compliance objectives.
• Maintain comprehensive records and evidence supporting risk assessments, due diligence activities, investigations, and compliance controls in accordance with regulatory requirements, audit expectations, and enterprise retention standards.
• Support the implementation of risk-focused processes, governance structures, and technology solutions that enable effective change management, operational risk mitigation, and sustainable business transformation.

Approximate Percentage of Time

20%

Continuous Improvement And Support Responsibilities

• Build, improve and maintain communication program and training processes through daily interaction with cross-functional teams while meeting legal requirements.
• Collaborate to update policies, procedure, DTPs and work instructions to reflect current processes.
• Identify enhancement opportunities to make more efficient the processes or opportunities to innovate or automate.
• Close connection with regional leads.
• Maintain all records related to their responsibilities according to the requirements of the current regulation and enterprise retention schedule
• Support on the implementation of structured processes and tools to initiate and support change management activities as designated by the organization
• Seek to continuously learn and improve knowledge and skills by identifying developmental opportunities with supervisor. Participate in appropriate training sessions and share lessons learned. Competently apply knowledge of new skills learned to existing projects and work.
• Collaborate with Procurement, Finance, Compliance, Regulatory, HCC, and other risk functions
• Drive continuous improvement and identify areas of opportunity
• Understand technical needs of our Risk Screening Tool
• Support Testing and Changes to tools supporting Risk Screenings
• Key support in Continuous improvement

Partnership and cross collaboration with all regions LATAM, EMEA, NA, ASPAC to develop a teamwork spirit, share best practices and suggest process improvements as needed on Suppliers Due Diligence process

Required Qualifications

Required Minimum Education

Bachelor's Degree Industrial engineering, Business Administration, Economics, Audit, Risk Management, LAFT/OFAC or Compliance Certification.

Required Years of Related Experience

3+ years

Required Knowledge, Skills and Abilities (Uncompromised requirements for the role)

Key Skills Include

• Excellent written and oral communication skills and an ability to present and interact with the highest level of business leaders; Ability to build strong business partnerships;
• Must talk English language.
• Three years of work experience in Compliance, risk management, Audit or related field.
• The ability to communicate clearly and concisely across all levels of the company is required.
• In depth knowledge of Procurement systems and processes are required.

Technical and programming skills

Travel on the Job

N/A at this moment

Percentage Traveled

0%

Type of Travel Required

0

People Management Experience

Not applicable

Required Years Of People Management Experience

Not applicable

Preferred Qualifications

Preferred Minimum Education

Bachelor's Degree in related field

Preferred Area of Study

Bachelor's Degree Industrial engineering, Business Administration, Economics, Audit or Risk Management, LAFT/OFAC or Compliance Certification or related field is required

Preferred Related Industry Experience (if applicable)

Pharmaceutical, Audit/consulting - big four, Global Services is a plus

Preferred Knowledge, Skills And Abilities

• Results-driven individual and detail orientation.
• Exceptional listener and communicator who effectively conveys information verbally and in writing.
• The candidate must have strong analytical problem solving and interpersonal skills, leadership and influencing.
• Presentation skills.
• Must be able to work under pressure achieving consistently high results through individual and team efforts.

Good knowledge of MSOffice tools i.e. Excel, Power Point, Word

Key Working Relationships

Internal

Procurement, Compliance partners

External

3Rd Parties: Suppliers, Customers, Outsourced Providers, Regulatory agencies

Required Skills

Preferred Skills

Audit and Compliance Trends, Audit Management, Audit Reporting, Business Behavior, Business Writing, Communication, Compliance Management, Critical Thinking, Execution Focus, Legal Function, Legal Services, Office Administration, Process Optimization, Regulatory Environment, Report Writing, Training Administration