Senior GRC Analyst: Third-Party & Human Risk

Sky Mavis; St. Louis (MO); On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

Comprehensive benefits package

Discretionary annual bonus

Flexible spending accounts

Job summary

Sky Mavis is seeking a Senior GRC Analyst focused on Third-Party and Human Risk Management in St. Louis, Missouri. This role requires 6–8+ years of experience in Risk Assessment and Information Security, with strong analytical skills. You will lead the Vendor Risk Management program, conduct due diligence, and develop engaging security materials.

You'll also take ownership of security awareness initiatives and ensure compliance with regulations. Comprehensive benefits including a discretionary annual bonus and generous PTO are offered.

Qualifications

• 6–8+ years’ experience in Risk & Compliance Assessment.
• 3–4+ years working in Information Security roles.
• Strong knowledge of regulations like NIST 800-171.

Responsibilities

• Manage the 3rd Party Vendor Risk Management program.
• Conduct due diligence on vendors prior to contracting.
• Collaborate with teams to ensure data protection in contracts.
• Track and report on execution of remediation action plans.
• Develop materials that simplify complex technical risks.

Skills

Risk Assessment

Information Security

Compliance Assessment

Technical Literacy

Analytical Skills

Education

Bachelor's degree in Information Technology or related field

Certified in Risk & Information Systems Control (CRISC)

SANS Security Awareness Professional (SSAP)

Certified Third-party Risk Professional Certification (CTPRP)

Tools

Microsoft Excel

PowerPoint

Word

Job description

Sky Mavis is seeking a Senior GRC Analyst focused on Third-Party and Human Risk Management in St. Louis, Missouri. This role requires 6–8+ years of experience in Risk Assessment and Information Security, with strong analytical skills. You will lead the Vendor Risk Management program, conduct due diligence, and develop engaging security materials.

You'll also take ownership of security awareness initiatives and ensure compliance with regulations. Comprehensive benefits including a discretionary annual bonus and generous PTO are offered.