Remote Third-Party Risk Analyst (Vendor Risk)

Suncoast-Credit-Union; Tampa (FL); On-site; USD 60,000 - 90,000; Full time

Benefits offered by this job

Bonus program

401K matching

Retirement planning

Employee discounts

Flex spending accounts

Wellness resources

Time off and leave benefits

Volunteer hours

Job summary

Suncoast Credit Union is seeking a Third-Party Risk Analyst for remote work with residency in Florida. You will support the TPRM program by performing risk assessments, maintaining vendor profiles, and aiding with monitoring and reporting.

The role requires collaboration with procurement, information security, legal, ERM, and compliance to address vendor risks per policy and regulatory expectations. Responsibilities include performing risk assessments across multiple domains, reviewing SOC

Qualifications

• Bachelor’s degree in business, information systems, cybersecurity, or risk management.
• 1 year of experience in risk, compliance, vendor management, procurement, or audit.
• Knowledge of risk frameworks (NIST CSF/800-53, ISO 27001, SOC 2) and regulations (GLBA, HIPAA, GDPR/CCPA).
• Proficiency with Excel/Sheets and familiarity with GRC/TPRM tools.

Responsibilities

• Perform initial and periodic inherent/residual vendor risk assessments across security, privacy, operational, financial, and compliance domains.
• Issue and track standardized questionnaires and review SOC reports, ISO certifications, insurance certificates, privacy policies, and BC/DR plans.
• Maintain accurate vendor inventories, lifecycle statuses, findings, ratings, and remediation actions in the TPRM system of record.
• Support contract reviews by identifying standard risk clauses (SLAs, data protection, audit rights) and escalating gaps to the director.
• Monitor vendors using internal KPIs/KRIs and external data; trigger re-assessments when thresholds are met.
• Prepare dashboards and evidence packages for audits, regulatory exams, and management committees.
• Coordinate with stakeholders to track remediation and verify closure of issues by due dates.
• Contribute to process documentation, playbooks, templates, and operational efficiency initiatives.
• Maintain knowledge and understanding of current trends, laws, and issues affecting the area of expertise.
• Complete annual compliance and info security training to understand employees' role in maintaining effective compliance and security programs.
• Attend educational events to increase professional knowledge.

Skills

Analytical skills

Written communication

Verbal communication

Interpersonal skills

Confidentiality

Prioritization

Problem solving

Education

Bachelor’s degree in business, information systems, cybersecurity, risk management, or related field

Tools

Archer

ServiceNow

OneTrust

Prevalent

ProcessUnity

Excel

Job description

Suncoast Credit Union is seeking a Third-Party Risk Analyst for remote work with residency in Florida. You will support the TPRM program by performing risk assessments, maintaining vendor profiles, and aiding with monitoring and reporting.

The role requires collaboration with procurement, information security, legal, ERM, and compliance to address vendor risks per policy and regulatory expectations. Responsibilities include performing risk assessments across multiple domains, reviewing SOC