Third Party Risk Analyst

Genesys; Manila, Hinoba-an; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Genesys is seeking a Third-Party Risk Analyst to support the end-to-end TPRM lifecycle, including intake, due diligence, risk assessments, issue tracking and ongoing monitoring.

You will manage workflows, review risk artifacts and guide remediation with cross-functional teams to strengthen security posture across our vendor ecosystem.

Qualifications

• Bachelor's degree in information security, IT, Cybersecurity, or a related field.
• Minimum 2 years of related experience in information security, IT audit, risk, compliance, vendor management, or GRC preferred.
• Strong critical thinking and analytical skills; able to interpret evidence and translate control gaps into clear risk statements.
• Detail-oriented with strong documentation discipline and comfort working in process-driven environments.
• Strong collaboration and stakeholder management skills; able to coordinate with diverse business unit.
• Ability to review and interpret complex vendor artifacts, including SOC reports, security questionnaires, and policies.
• Strong verbal and written communication skills.

Responsibilities

• Manage third-party risk management workflow, including reviewing new requests, tracking in-progress assessments, and driving assessments to completion.
• Conduct initial and ongoing third-party security risk assessments, including control evaluation, risk rating, and documentation of residual risk.
• Administer and maintain the third-party risk assessment tooling (UpGuard), including vendor onboarding, questionnaire distribution, response tracking, evidence collection, and workflow/status management.
• Review and validate third-party security and compliance artifacts (e.g., SOC 2 reports, ISO 27001 certificates, policies/standards, pen test summaries) and identify control gaps.
• Document findings, write clear risk narratives, and recommend remediation actions or compensating controls aligned to internal standards and risk appetite.
• Track remediation plans, validate closure evidence, and support reassessments/refresh cycles and ongoing monitoring activities.
• Contribute to continuous improvement of TPRM processes, templates, and playbooks

Skills

Information security

Vendor management

Risk assessment

GRC

SOC reports

Analytical thinking

Documentation

Education

Info security degree

Tools

UpGuard

Job description

Role Overview

Be the one building AI-powered experiences where they matter most. At Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data and AI to help organizations deliver more personalized service, improve operational efficiency and build stronger customer relationships. Help build, support and operate technology used by more than 8,000 organizations in over 100 countries – moving AI from possibility to production in real-world enterprise environments every day.

The Third-Party Risk Analyst is a key member of the Information Security team and reports directly to the Third-Party Risk Program Manager. This role is responsible for supporting the end-to-end Third-Party Risk Management (TPRM) lifecycle, including intake, due diligence, risk assessments, issue tracking, and ongoing monitoring.

Key Responsibilities

• Manage third-party risk management workflow, including reviewing new requests, tracking in-progress assessments, and driving assessments to completion.
• Conduct initial and ongoing third-party security risk assessments, including control evaluation, risk rating, and documentation of residual risk.
• Administer and maintain the third-party risk assessment tooling (UpGuard), including vendor onboarding, questionnaire distribution, response tracking, evidence collection, and workflow/status management.
• Review and validate third-party security and compliance artifacts (e.g., SOC 2 reports, ISO 27001 certificates, policies/standards, pen test summaries) and identify control gaps.
• Document findings, write clear risk narratives, and recommend remediation actions or compensating controls aligned to internal standards and risk appetite.
• Track remediation plans, validate closure evidence, and support reassessments/refresh cycles and ongoing monitoring activities.
• Contribute to continuous improvement of TPRM processes, templates, and playbooks

Requirements

• Bachelor’s degree in information security, IT, Cybersecurity, or a related field.
• Minimum 2 years of related experience in information security, IT audit, risk, compliance, vendor management, or GRC preferred.
• Strong critical thinking and analytical skills; able to interpret evidence and translate control gaps into clear risk statements.
• Detail-oriented with strong documentation discipline and comfort working in process-driven environments.
• Strong collaboration and stakeholder management skills; able to coordinate with diverse business unit.
• Ability to review and interpret complex vendor artifacts, including SOC reports, security questionnaires, and policies.
• Strong verbal and written communication skills.
• Ability to learn new tools quickly and operate effectively.

Working at Genesys AI at enterprise scale – Build, support and operate AI-powered technology used by more than 8,000 organizations worldwide.

150+ new AI features were released in the last fiscal year. A flexible-first culture – Join a global team of nearly 7,000 employees with flexible ways of working designed to help people do their best work.

Growth in the AI era – Build future-ready skills through mentorship, learning programs, leadership development and education support. Time to recharge and give back – Benefits include paid volunteer time, August Free Fridays, well-being resources and regionally tailored programs for employees and their families.

Recognized globally – Genesys is Great Place to Work® certified in 17 countries and 94% of employees are proud to tell others they work at Genesys. Learn more about our culture, AI innovation and sustainability commitments through our Careers site and Sustainability Report.

About Genesys

Genesys® empowers more than 8,000 organizations worldwide to create the best customer and employee experiences. With agentic AI at its core, Genesys Cloud™ is the AI-Powered Experience Orchestration platform that connects people, systems, data and AI across the enterprise. As a result, organizations can drive customer loyalty, growth and retention while increasing operational efficiency and teamwork across human and AI workforces. To learn more, visit www.genesys.com.

Reasonable Accommodations

If you require a reasonable accommodation to complete any part of the application process, or are limited in your ability to access or use this online application and need an alternative method for applying, you or someone you know may contact us at [e-mail]. You can expect a response within 24–48 hours. To help us provide the best support, click the email link above to open a pre-filled message and complete the requested information before sending. If you have any questions, please include them in your email. This email is intended to support job seekers requesting accommodations. Messages unrelated to accommodation—such as application follow-ups or resume submissions—may not receive a response.

Equal Opportunity Employment

Genesys is an equal opportunity employer committed to fairness in the workplace. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression, marital status, domestic partner status, national origin, genetics, disability, military and veteran status, and other protected characteristics. Please note that recruiters will never ask for sensitive personal or financial information during the application phase.