IT Third-Party Risk & Controls Lead

Guild Mortgage; United States; On-site; USD 83,000 - 118,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

AD&D

LTD

401(k) with employer match

Job summary

Guild Mortgage Company is seeking an IT Third-Party Controls Analyst to govern and monitor third-party relationships, including offshore staffing and SaaS vendors. The role ensures access models and least-privilege controls are defined and maintained, with collaboration across IT Governance, Security, HR, Legal, and Compliance.

The position emphasizes diligence, documentation, and remediation tracking, with a focus on risk reduction and governance reporting.

Qualifications

• Bachelor’s degree or equivalent combination of education and experience.
• Minimum five years of experience in IT operations, security, risk, audit, vendor/third-party risk management, or offshore staffing administration.
• Knowledge of IT General Controls audits and third-party risk management required.
• Experience coordinating offshore/outsourced staffing or SaaS/cloud vendors preferred.

Responsibilities

• Serve as the IT General Controls contact for third-party technology relationships.
• Document third-party due diligence and approvals and maintain records.
• Translate risk findings into operational control requirements and go-live controls.
• Own third-party engagement classification and ensure proper onboarding.
• Review third-party roles for least-privilege compliance.
• Coordinate access certifications for third-party users and validate need.

Skills

IT General Controls

Vendor Risk Management

Access Reviews

Offshore Staffing

Data Protection

GRC Tools

Education

Bachelor’s degree in Business Administration, Information Technology, or a related field

Tools

GRC tools

Vendor risk management platforms

IT asset-management platforms

Job description

Guild Mortgage Company is seeking an IT Third-Party Controls Analyst to govern and monitor third-party relationships, including offshore staffing and SaaS vendors. The role ensures access models and least-privilege controls are defined and maintained, with collaboration across IT Governance, Security, HR, Legal, and Compliance.

The position emphasizes diligence, documentation, and remediation tracking, with a focus on risk reduction and governance reporting.