Third-Party Risk Analyst

7456-Johnson & Johnson MedTech Colombia S.A.S. Legal Entity; Bogotá ciudad; Presencial; COP 60.000.000 - 90.000.000; Jornada completa

Descripción de la vacante

Johnson & Johnson is seeking a Third-Party Risk Analyst in Bogotá to manage due diligence and risk assessment for suppliers within the Enterprise Compliance program.

You will implement controls, monitor third-party risk, and collaborate with global teams to strengthen governance and data integrity across LATAM and beyond.

Formación

• Bachelor-level degree in a relevant field with at least 3 years in compliance or risk management.
• Strong written and verbal communication; ability to interact with senior leadership.
• Experience with supplier due diligence and governance processes.

Responsabilidades

• Perform third-party due diligence, sanctions screening, and risk assessments.
• Maintain and improve risk controls, data integrity, and governance documentation.
• Collaborate with Procurement, Compliance, Regulatory and cross-regional teams.
• Support continuous improvement and training initiatives within risk management.

Conocimientos

English (fluent)

Communication

Risk management

Audit

Procurement systems

MS Office

Educación

Bachelor's degree in Industrial engineering

Bachelor's degree in Business Administration

Bachelor's degree in Economics

Audit

Risk Management

LAFT/OFAC or Compliance Certification

Herramientas

MS Office

Descripción del empleo

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function: Legal & Compliance

Job Sub Function: Enterprise Compliance

Job Category: Professional

All Job Posting Locations: Bogotá, Distrito Capital, Colombia

Job Description:

Position Title: Third-Party Risk Analyst

Supervisor Title: Enterprise Compliance Sr. Specialist

Department Name / Number: GS Procurement- Third Party Risk

Physical Location of Position: Bogota

Geographic Scope of Responsibility: Global / Americas

Position Summary

The Third-Party Risk Analyst will perform Third party due diligence process as part of the Third-party risk management program. This role establishes and maintains procedures and controls to drive improvement initiatives supporting the daily operational activities of the team focusing on Third party risk. The analyst will also participate on ad hoc compliance projects and maintain procedures and controls to mitigate risk management, communications, audits, training, process capability/process improvement, and compliance general support.

Major Duties & Responsibilities

Approximate Percentage of Time: 80% Third Parties Due DiligencePerform third-party sanctions screening, risk assessments, and enhanced due diligence activities to identify, evaluate, and mitigate third-party risk exposures. Conduct daily monitoring and review of screening alerts, assessing potential compliance and enterprise risk impacts and escalating high-risk findings in accordance with established governance frameworks. Support supplier master data governance initiatives, ensuring data integrity, risk transparency, and adherence to enterprise control requirements. Execute risk-based third-party due diligence processes prior to onboarding and throughout the lifecycle of existing third parties, ensuring risk levels are appropriately assessed, documented, and managed. Perform data quality reviews, risk control validations, and database reconciliations to strengthen the reliability, completeness, and accuracy of information used for risk-based decision‑making. Design, enhance, and maintain risk awareness, communication, and training programs that promote a culture of compliance, risk ownership, and alignment with legal and regulatory requirements. Collaborate with cross‑functional stakeholders to develop, update, and strengthen policies, procedures, desktop procedures (DTPs), and work instructions, ensuring alignment with evolving risk landscapes, regulatory expectations, and internal control frameworks. Identify opportunities to strengthen risk controls, improve monitoring capabilities, and drive process optimization, automation, and innovation to enhance operational resilience and risk mitigation. Partner closely with regional and global stakeholders to assess emerging risks, promote consistent risk management practices, and support enterprise‑wide compliance objectives. Maintain comprehensive records and evidence supporting risk assessments, due diligence activities, investigations, and compliance controls in accordance with regulatory requirements, audit expectations, and enterprise retention standards. Support the implementation of risk‑focused processes, governance structures, and technology solutions that enable effective change management, operational risk mitigation, and sustainable business transformation.

Continuous Improvement and Support Responsibilities

• Build, improve and maintain communication program and training processes through daily interaction with cross‑functional teams while meeting legal requirements.
• Collaborate to update policies, procedure, DTPs and work instructions to reflect current processes.
• Identify enhancement opportunities to make more efficient the processes or opportunities to innovate or automate.
• Close connection with regional leads.
• Maintain all records related to their responsibilities according to the requirements of the current regulation and enterprise retention schedule.
• Support on the implementation of structured processes and tools to initiate and support change management activities as designated by the organization.
• Seek to continuously learn and improve knowledge and skills by identifying developmental opportunities with supervisor. Participate in appropriate training sessions and share lessons learned. Competently apply knowledge of new skills learned to existing projects and work.
• Collaborate with Procurement, Finance, Compliance, Regulatory, HCC, and other risk functions.
• Drive continuous improvement and identify areas of opportunity.
• Understand technical needs of our Risk Screening Tool.
• Support Testing and Changes to tools supporting Risk Screenings.
• Key support in Continuous improvement Partnership and cross collaboration with all regions LATAM, EMEA, NA, ASPAC to develop a teamwork spirit, share best practices and suggest process improvements as needed on Suppliers Due Diligence process.

Required Qualifications Required Minimum Education: Bachelor's Degree Industrial engineering, Business Administration, Economics, Audit, Risk Management, LAFT/OFAC or Compliance Certification.

Required Years of Related Experience: 3+ years

Required Knowledge, Skills and Abilities (Uncompromised requirements for the role): Key skills include: Excellent written and oral communication skills and an ability to present and interact with the highest level of business leaders; Ability to build strong business partnerships; • Must talk English language. • Three years of work experience in Compliance, risk management, Audit or related field. • The ability to communicate clearly and concisely across all levels of the company is required. • In depth knowledge of Procurement systems and processes are required. Technical and programming skills Travel on the Job N/A at this moment Percentage Traveled: 0% Type of Travel Required: 0 People Management Experience: Not applicable Required Years of People Management Experience: Not applicable

Preferred Qualifications Preferred Minimum Education: Bachelor's Degree in related field Preferred Area of Study: Bachelor's Degree Industrial engineering, Business Administration, Economics, Audit or Risk Management, LAFT/OFAC or Compliance Certification or related field is required Preferred Related Industry Experience (if applicable): Pharmaceutical, Audit/consulting - big four, Global Services is a plus Preferred Knowledge, Skills and Abilities: Results-driven individual and detail orientation. Exceptional listener and communicator who effectively conveys information verbally and in writing. · The candidate must have strong analytical problem solving and interpersonal skills, leadership and influencing. · Presentation skills. · Must be able to work under pressure achieving consistently high results through individual and team efforts. Good knowledge of MSOffice tools i.e. Excel, Power Point, Word Key Working Relationships Internal Procurement, Compliance partners External 3Rd Parties: Suppliers, Customers, Outsourced Providers, Regulatory agencies Required Skills: Preferred Skills: Audit and Compliance Trends, Audit Management, Audit Reporting, Business Behavior, Business Writing, Communication, Compliance Management, Critical Thinking, Execution Focus, Legal Function, Legal Services, Office Administration, Process Optimization, Regulatory Environment, Report Writing, Training Administration

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at https://www.jnj.com/.