Remote Third-Party Risk Analyst | GRC & Security

CrowdStrike, Inc.; Sunnyvale (CA); Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Health insurance

401k

Bonuses

Equity grants

Paid time off

Career development

Job summary

CrowdStrike, Inc. is seeking a Third Party Risk Management Analyst in Sunnyvale, CA to own and mature the TPRM program. You will assess third-party risks, prioritize vendors, and drive remediation efforts across legal, procurement, and IT teams.

You will develop dashboards, report program health, and deliver training to internal stakeholders. Strong knowledge of regulatory frameworks and AI-enabled risk workflows is essential.

Qualifications

• Bachelor's degree in CS, Information Security, Business, or related field (or up to 5 years of relevant experience).
• Experience with GRC or TPRM platforms such as ServiceNow, OneTrust, ProcessUnity.
• Strong security risk assessment methodologies for third-party environments.
• Familiarity with SOC 1/SOC 2, ISO 27001/27002, NIST 800-53, GDPR, PCI-DSS.
• Experience reviewing vendor security documentation (SOC reports, pen tests).
• Ability to leverage AI to enhance decision-making and workflows.

Responsibilities

• Manage and mature CrowdStrike's TPRM program, including policies, standards, procedures, and assessment methodologies.
• Conduct security risk assessments of third-party vendors, evaluating controls across data security, access management, incident response, business continuity, and compliance.
• Tier and prioritize vendors based on risk factors including data sensitivity, operational dependency, and regulatory scope.
• Manage vendor risk findings, remediation plans, and exceptions, working with vendors and internal stakeholders to resolve issues in a timely manner.
• Monitor the third-party risk landscape, including emerging threats, regulatory changes, and vendor security incidents, and communicate relevant updates to stakeholders.
• Develop and maintain TPRM dashboards and reporting to provide visibility into vendor risk posture and program health.
• Develop and deliver training and communications to internal stakeholders on TPRM processes, requirements, and responsibilities.
• Identify opportunities to automate and optimize TPRM workflows, leveraging GRC tooling and integrations to improve efficiency and scalability.
• Proactively identify gaps in the TPRM program and lead efforts to address and remediate them.
• Perform other duties within the scope of Third Party Risk Management and broader Cyber GRC.

Skills

GRC platforms

Vendor risk mgmt

Risk assessment

Regulatory knowledge

AI in security

Communication skills

Vendor security docs

Education

Bachelor's degree

Tools

ServiceNow

OneTrust

ProcessUnity

Job description

CrowdStrike, Inc. is seeking a Third Party Risk Management Analyst in Sunnyvale, CA to own and mature the TPRM program. You will assess third-party risks, prioritize vendors, and drive remediation efforts across legal, procurement, and IT teams.

You will develop dashboards, report program health, and deliver training to internal stakeholders. Strong knowledge of regulatory frameworks and AI-enabled risk workflows is essential.