Third Party Vendor Analyst

GR8 Global Philippines; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

GR8 Global Philippines is seeking a Third Party Utility Analyst to support end‑to‑end Third-Party Risk Management, including onboarding, due diligence, risk questionnaires, and remediation activities.

The role involves reviewing contracts for TPRM applicability, addressing control gaps, and collaborating with Legal, Compliance, and business units to ensure regulatory alignment and operational effectiveness.

Qualifications

• Bachelor’s degree in a relevant field such as information security, cybersecurity, business administration, finance, or risk management.
• 3–5+ years in third‑party risk management or vendor management.
• Strong analytical skills with high attention to detail and accuracy.
• Excellent verbal and written communication with the ability to engage across levels.

Responsibilities

• Provide white glove support to stakeholders for TPRM activities including risk questionnaires and assessments.
• Review vendor contracts to identify TPRM applicability and scope.
• Facilitate touchpoints with stakeholders to close out open items and address control gaps.
• Guide users through end-to-end TPRM from onboarding to offboarding.
• Adapt to new processes to comply with regulatory changes.
• Maintain operational procedures for TPRM processes.
• Collaborate with third‑party providers, business units, Legal, Compliance and other teams.
• Lead process improvement and TPRM projects.

Skills

Analytical skills

Interpersonal skills

Verbal and written communication

Planning and time management

Collaboration

Attention to detail

Education

Bachelor’s degree in information security, cybersecurity, business administration, finance, or risk management

Tools

GRC systems (RSA Archer)

Risk assessment tools (D&B, Fircosoft)

Microsoft Office (Excel, Word, PowerPoint, Visio)

Job description

Overview

GR8 Global is a firm forged by an affinity of top 100 accounting firms in the United States with the objective of coming together and redefining the workplace while providing additional value to our partners. We believe that there is a huge pool of talent outside of the US. Our mission is to bring together the best talent and match them with excellent work opportunities based on their core competencies, skill sets, and overall experience and exposure in the different areas of audit, accounting, and similar financial-related areas. We prioritize creating a positive and inclusive workplace culture where all talents are valued and developed.

We're looking for a Third Party Utility Analyst who will support and guide business stakeholders through the end-to-end Third-Party Risk Management (TPRM) process, including vendor onboarding, due diligence assessments, risk questionnaires, performance assessments, remediation activities, and vendor offboarding. The role will be responsible for reviewing vendor services and contracts to determine TPRM applicability, identifying and addressing control gaps, maintaining operational procedures, and collaborating with third parties, business units, Legal, Compliance, and other stakeholders. The ideal candidate will contribute to process improvements and ensure third-party risk activities align with regulatory requirements and organizational standards.

Responsibilities

• Provide white glove level of support to business stakeholders in managing and completing Third Party Risk Management activities such as risk questionnaires, performance assessments and exit strategies.


• Review contract details to determine the type of service provided by the vendor and determine if it is in scope for TPRM review.


• Conduct touchpoints and close out calls with business stakeholders to address open items such as control gaps identified during the due diligence assessment.


• Guide users through the end-to-end TPRM process from vendor onboarding to vendor off boarding.


• Adjust to new/updated processes to adhere to changes in the regulatory environment.


• Assist in maintaining operational procedures for TPRM processes.


• Collaborate with various stakeholders, including third party providers, business units, Legal, Compliance and other teams.


• Lead process improvement activities, participating in TPRM special projects and other assessment related activities.

Qualifications

• Bachelor’s degree in relevant field such as information security, cybersecurity, business administration, finance, or risk management. Relevant certifications (e.g. CTPRP, CISA, CRISC and/or CISSP certification).


• 3-5+ years in third-party risk management, vendor management, or related field.


• Strong analytical skills with high attention to detail and accuracy.


• Strong interpersonal and critical thinking skills with the ability to collaborate with others to deliver impactful results.


• Strong verbal and written communication skills, with the ability to clearly and confidently engage with people at all levels of the organization.


• Demonstrate an ability to establish and maintain effective working relationships at all levels within the organization


• Effective planning, time management, attention to detail, customer service and problem-solving skills.


• Oversee and/or independently perform tasks from end to end with minimal supervision.GRC (Governance, Risk and Compliance) system experience preferable (RSA Archer experience a plus)


• Proficient in using risk assessment and monitoring tools (e.g. Dun and Bradstreet, Fircosoft)


• Experience with Microsoft applications (Excel, Word, PowerPoint, and Visio)

Wfh Technical Requirements

• Minimum Internet Speed: 50-100 Mbps


• Dedicated Home Office Area: Private, quiet workspace


• Business Continuity Plan: Power and Internet Backup is a MUST