Associate TPRM Risk Analyst – Risk & Remediation

MongoDB; United States; Sur place; USD 70 000 - 138 000; Plein temps

Résumé du poste

MongoDB is seeking an Associate TPRM Risk Analyst to support the third-party risk lifecycle under the TPRM program. You will apply risk methodology, coordinate SME reviews, maintain records, and escalate significant gaps with internal stakeholders.

The role emphasizes routine risk assessments, data quality, and timely risk communication with third parties, with focus on medium and low-risk remediation activities within a global cloud data platform environment.

Qualifications

• 3-5 years of experience in Third-Party Risk Management (TPRM) or Governance, Risk & Compliance (GRC).
• Demonstrated experience performing substantive risk assessments and applying formula-based or quantitative risk methodologies.
• Bachelor’s degree in a relevant field (Cybersecurity, Business, Information Systems).

Responsabilités

• Apply the TPRM Program’s inherent risk methodology and assign Criticality designations for standard third-party relationships.
• Perform completeness and consistency checks on intake information, risk calculations, and assessment records.
• Gather, organize, and maintain third-party information and documentation.
• Identify and route required SME reviews and track responses.
• Maintain records in Graphite Connect, Jira, and other systems of record.
• Support remediation of gaps and communicate with third parties to obtain complete responses.
• Track remediation actions and escalate high-risk or judgment-intensive gaps.
• Support periodic third-party reviews and remediation efforts.
• Compile assessment data and support routine status updates.

Connaissances

3-5 years TPRM/GRC

Substantive risk assessments

Formula-based risk methodologies

Attention to detail

Communication

Reliability

Formation

Bachelor's degree (Cybersecurity, Business, Information Systems)

Outils

TPRM platform

Description du poste

MongoDB is seeking an Associate TPRM Risk Analyst to support the third-party risk lifecycle under the TPRM program. You will apply risk methodology, coordinate SME reviews, maintain records, and escalate significant gaps with internal stakeholders.

The role emphasizes routine risk assessments, data quality, and timely risk communication with third parties, with focus on medium and low-risk remediation activities within a global cloud data platform environment.