Senior Third-Party GRC Analyst

SourcePro Search, LLC; Los Angeles (CA); Presencial; USD 110.000 - 150.000; Jornada completa

Descripción de la vacante

SourcePro Search, LLC in Los Angeles seeks an experienced Third Party Governance, Risk and Compliance (GRC) Analyst to join the InfoSec team. The role focuses on Third Party Risk Management, Client Compliance, and IT Risk Management, supporting due diligence, risk assessments and ongoing monitoring across functions.

You will coordinate GRC efforts, review vendor cybersecurity controls (SSAE18, SOC2 Type II), and engage with procurement, contracts and stakeholders to drive remediation and

Formación

• Minimum 3 years in Third Party Risk Management and GRC.
• Experience with Big 4 consulting, financial institutions, or regulated industries.
• Strong knowledge of privacy and information security frameworks (e.g., NIST, ISO) and regulations (GDPR, CCPA).
• Excellent written and verbal communication; proactive and independent.

Responsabilidades

• Work with TPRM Manager across vendor lifecycle from pre-onboarding to offboarding.
• Facilitate third party risk assessments for due diligence and ongoing evaluation.
• Review vendor due diligence docs using MS Excel/Confluence; track follow ups.
• Review vendor cyber risk documents (SSAE18, SOC2 Type II) and policies.
• Understand NIST CSF and GDPR to support cross-GRC assessments.
• Coordinate with internal stakeholders to report issues and remediation efforts.

Conocimientos

Third Party Risk Management

GRC

IT Risk Management

Vendor risk assessments

Regulatory compliance

Big 4 experience

Herramientas

MS Excel

Confluence

Descripción del empleo

SourcePro Search, LLC in Los Angeles seeks an experienced Third Party Governance, Risk and Compliance (GRC) Analyst to join the InfoSec team. The role focuses on Third Party Risk Management, Client Compliance, and IT Risk Management, supporting due diligence, risk assessments and ongoing monitoring across functions.

You will coordinate GRC efforts, review vendor cybersecurity controls (SSAE18, SOC2 Type II), and engage with procurement, contracts and stakeholders to drive remediation and