Remote Third-Party Risk Analyst (GRC)

Suncoast Credit Union; Tampa (FL); Remote; USD 60,000 - 90,000; Full time

Benefits offered by this job

Bonus program up to 12%

401K Matching up to 8%

Retirement Planning

Pay Increases based on Competency

Employee Loan Discounts

Flex Spending Accounts

Medical Coverage

Dental and Vision Coverage

Access to 4,000+ Gyms

Mental Health Resources

PTO Wellness Days

Short Term Disability Coverage

Long Term Disability Coverage

11 Paid Holidays

3 weeks Paid Time Off

4 weeks Paid Parental Leave

Birthday PTO

Paid Volunteer Hours

Degree Assistance up to $5,000 peryear

Job summary

Suncoast Credit Union is seeking a Third-Party Risk Analyst to support the TPRM program by performing risk assessments, maintaining vendor profiles, and assisting with monitoring and reporting. This is a full-time remote role, with residency required in the state of Florida, and collaboration with Legal, IT, Compliance, and Procurement.

Responsibilities include reviewing SOC reports and ISO certifications, maintaining vendor inventories, tracking remediation, and preparing evidence packages for

Qualifications

• Bachelor’s degree in business, information systems, cybersecurity, risk management, or related field; a combination of work experience and training may substitute.
• Minimum of 1 year of experience in risk, compliance, vendor management, procurement, or audit.

Responsibilities

• Perform initial and periodic inherent/residual vendor risk assessments across security, privacy, operational, financial, and compliance domains.
• Issue and track standardized questionnaires and review SOC reports, ISO certifications, insurance certificates, privacy policies, and BC/DR plans.
• Maintain accurate vendor inventories, lifecycle statuses, findings, ratings, and remediation actions in the TPRM system of record.
• Support contract reviews by identifying standard risk clauses (SLAs, data protection, audit rights) and escalating gaps to the director.
• Monitor vendors using internal KPIs/KRIs and external data; trigger re-assessments when thresholds are met.
• Prepare dashboards and evidence packages for audits, regulatory exams, and management committees.
• Coordinate with stakeholders to track remediation and verify closure of issues by due dates.
• Contribute to process documentation, playbooks, templates, and operational efficiency initiatives.
• Maintain knowledge and understanding of current trends, laws, and issues affecting the area of expertise.
• Complete annual compliance and info security training to understand employees' role in maintaining effective compliance and security programs.
• Attend educational events to increase professional knowledge.

Skills

Analytical skills

Writing skills

Documentation

Confidentiality

Vendor contracts

Prioritization

Attention to detail

Problem solving

Communication

Regulatory compliance

CU systems knowledge

Risk frameworks

Excel/Sheets

GRC/TPRM tools

Education

Bachelor’s degree

1 year risk/compliance/vendor management/audit experience

Tools

Excel/Sheets

GRC/TPRM tools (Archer/ServiceNow/OneTrust/Prevalent/ProcessUnity)

Job description

Suncoast Credit Union is seeking a Third-Party Risk Analyst to support the TPRM program by performing risk assessments, maintaining vendor profiles, and assisting with monitoring and reporting. This is a full-time remote role, with residency required in the state of Florida, and collaboration with Legal, IT, Compliance, and Procurement.

Responsibilities include reviewing SOC reports and ISO certifications, maintaining vendor inventories, tracking remediation, and preparing evidence packages for