Third-Party Risk & Compliance Analyst

GR8 Global Philippines; Philippines; Hybrid; PHP 600,000 - 900,000; Full time

Job summary

GR8 Global Philippines is seeking a Third Party Utility Analyst to support end‑to‑end Third-Party Risk Management, including onboarding, due diligence, risk questionnaires, and remediation activities.

The role involves reviewing contracts for TPRM applicability, addressing control gaps, and collaborating with Legal, Compliance, and business units to ensure regulatory alignment and operational effectiveness.

Qualifications

• Bachelor’s degree in a relevant field such as information security, cybersecurity, business administration, finance, or risk management.
• 3–5+ years in third‑party risk management or vendor management.
• Strong analytical skills with high attention to detail and accuracy.
• Excellent verbal and written communication with the ability to engage across levels.

Responsibilities

• Provide white glove support to stakeholders for TPRM activities including risk questionnaires and assessments.
• Review vendor contracts to identify TPRM applicability and scope.
• Facilitate touchpoints with stakeholders to close out open items and address control gaps.
• Guide users through end-to-end TPRM from onboarding to offboarding.
• Adapt to new processes to comply with regulatory changes.
• Maintain operational procedures for TPRM processes.
• Collaborate with third‑party providers, business units, Legal, Compliance and other teams.
• Lead process improvement and TPRM projects.

Skills

Analytical skills

Interpersonal skills

Verbal and written communication

Planning and time management

Collaboration

Attention to detail

Education

Bachelor’s degree in information security, cybersecurity, business administration, finance, or risk management

Tools

GRC systems (RSA Archer)

Risk assessment tools (D&B, Fircosoft)

Microsoft Office (Excel, Word, PowerPoint, Visio)

Job description

GR8 Global Philippines is seeking a Third Party Utility Analyst to support end‑to‑end Third-Party Risk Management, including onboarding, due diligence, risk questionnaires, and remediation activities.

The role involves reviewing contracts for TPRM applicability, addressing control gaps, and collaborating with Legal, Compliance, and business units to ensure regulatory alignment and operational effectiveness.