Global Third-Party Risk & Compliance Consultant

MassMutual; Springfield (MA); On-site; USD 110,000 - 140,000; Full time

Job summary

MassMutual is seeking a Third-Party Risk Consultant to implement the third-party tech risk framework and work with US, Romania, and India teams. You will conduct risk assessments, evaluate services, data flows, integrations, controls, and evidence to document risk exposure.

You’ll help adopt risk management practices across the ETX organization. You will collaborate across globally distributed teams, drive risk mitigation, and support a risk-aware culture with a focus on efficient governance and

Qualifications

• 2+ years of experience in risk management and/or completing third-party risk assessments.
• 2+ years of experience implementing metrics to track status, identify trends, and surface potential issues.
• 2+ years of experience working in an enterprise GRC platform, including proficient use of Excel import/export functions.
• Associate’s degree, preferably in technology, cybersecurity, risk management, or business-related field.
• Minimum of 3 years of experience in third-party risk management, technology risk, cybersecurity, audit, or controls testing.
• Foundational understanding of third-party risk domains, including cybersecurity, data protection, Cloud/SaaS risk, IAM, and business continuity.

Responsibilities

• Analyze third-party services, data flows, and system integrations to identify risk exposure.
• Collaborate with issue management teams to track and remediate vulnerabilities and risks.
• Support status reporting and metrics tracking for ongoing third-party risk activities.
• Evaluate and document evidence for breach events and incident response.
• Review and document observations to record results per templates and quality standards.
• Identify control gaps and non-compliance issues for review and disposition.
• Assist in risk rating determinations and escalation decisions.
• Perform risk assessments to ensure third parties meet security and technology standards.
• Escalate delays, gaps in information, or emerging risks to team lead.
• Consult with internal SMEs to document risk findings and communicate to stakeholders.
• Coordinate across Romania, U.S., and India working hours for timely responses.
• Assist onboarding, knowledge transfer, and documentation for contract engagement.

Skills

Risk management

Third-party risk assessments

Metrics & analytics

GRC platform

Excel

Education

Associate-degree (technology/cybersecurity/risk management/business)

Tools

Excel

SharePoint

Job description

MassMutual is seeking a Third-Party Risk Consultant to implement the third-party tech risk framework and work with US, Romania, and India teams. You will conduct risk assessments, evaluate services, data flows, integrations, controls, and evidence to document risk exposure.

You’ll help adopt risk management practices across the ETX organization. You will collaborate across globally distributed teams, drive risk mitigation, and support a risk-aware culture with a focus on efficient governance and