Remote Third-Party Risk & Compliance Analyst

Dickerson Group; United States; On-site; USD 87,000 - 110,000; Full time

Benefits offered by this job

Remote work

Bonus eligibility

Professional development

Job summary

At Alera Group, risk analysts help assess third-party security and regulatory compliance for vendors, ensuring remediation and governance across departments. The role emphasizes collaboration with Information Security, Legal, Procurement, and technology teams, supporting audits and building dashboards to drive risk visibility.

The position offers remote work with preference for Central or Eastern Time Zone, and opportunities for professional development within a national organization.

Qualifications

• 5+ years of experience in cybersecurity risk, IT risk, information security, governance, risk and compliance (GRC), third-party risk, IT audit, or a related field.
• Hands-on experience performing third-party or vendor security risk assessments.
• Experience coordinating or performing user access reviews, access certifications, or identity governance activities.
• Familiarity with cybersecurity and compliance frameworks such as NIST CSF, SOC 2, CIS Controls, HIPAA, or similar standards.
• Strong analytical, critical thinking, and communication skills with the ability to evaluate complex situations and communicate recommendations.
• Experience working with GRC, ticketing, identity governance, or third-party risk management platforms.
• Exercise sound judgment when evaluating risk scenarios and remediation activities.

Responsibilities

• Perform third-party security and compliance risk assessments for new and existing vendors, evaluating risk exposure, control effectiveness, business impact, and remediation requirements
• Review SOC reports, security questionnaires, audit documentation, certifications, and other evidence to identify control gaps and potential business impacts
• Coordinate and execute user access reviews, validating access appropriateness and ensuring identified issues are remediated promptly
• Document risks, findings, recommendations, and remediation plans while maintaining accurate records within governance, risk, and compliance platforms
• Serve as a trusted advisor to stakeholders by asking thoughtful questions, identifying underlying business needs, assessing potential risks, and translating ambiguous requests into clear risk assessment, governance, and compliance activities
• Partner with Information Security, Technology, Legal, Procurement, and business stakeholders to identify requirements, resolve risk and compliance issues, and drive effective risk-based decision-making
• Support internal and external audits, regulatory examinations, and compliance activities through evidence collection and documentation management
• Develop risk metrics, reporting, and dashboards that drive visibility, support decision-making, and measure the effectiveness of third-party risk and governance programs
• Identify opportunities to improve risk management processes, controls, reporting, governance practices, and automation capabilities

Skills

Cybersecurity risk

IT risk

GRC

Vendor risk

Analytical thinking

Communication

Risk assessment

Stakeholder management

Identity governance

Tools

GRC platforms

Job description

At Alera Group, risk analysts help assess third-party security and regulatory compliance for vendors, ensuring remediation and governance across departments. The role emphasizes collaboration with Information Security, Legal, Procurement, and technology teams, supporting audits and building dashboards to drive risk visibility.

The position offers remote work with preference for Central or Eastern Time Zone, and opportunities for professional development within a national organization.