Senior Third-Party Risk & AI Automation Analyst

YUM; Louisville (KY); Hybrid; USD 95,000 - 125,000; Full time

Job summary

Yum! is seeking a Sr. IT Security Analyst I to lead and optimize Third-Party Risk Management (TPRM) initiatives.

The role focuses on assessing vendor security controls, mitigating risks, and driving AI-enabled improvements across cybersecurity programs. As a senior individual contributor, you will collaborate with Cybersecurity, Legal, Procurement, ERM, Technology, and business teams to ensure robust risk governance and scalable risk processes.

Qualifications

• Experience in third-party risk management and vendor cybersecurity risk assessment.
• Familiarity with governance, risk, and compliance frameworks relevant to third-party risk.
• Experience shaping or improving TPRM/GRC workflows and automation.
• Ability to translate TPRM requirements into automated workflows and reporting.
• Proficient in English, with strong written and verbal communication.

Responsibilities

• Execute and continuously improve Yum!’s Third-Party Risk Management (TPRM) processes.
• Manage complex third-party risk assessments and remediation activities.
• Support security contract reviews and integrate risk information into ERM processes.
• Identify automation opportunities to optimize TPRM workflows and AI-assisted capabilities.
• Collaborate with Legal, Procurement, Cybersecurity, ERM, Technology, and business teams.
• Develop dashboards and metrics to monitor assessment status, risk exposure, and remediation progress.
• Triage issues, ensure governance, and maintain data quality across systems.

Skills

Third-party risk mgmt

Cybersecurity risk assessments

GRC/workflow automation

AI-enabled risk analysis

Vendor security controls

Communication

Education

Bachelor's degree in Cybersecurity or related field

Job description

Yum! is seeking a Sr. IT Security Analyst I to lead and optimize Third-Party Risk Management (TPRM) initiatives.

The role focuses on assessing vendor security controls, mitigating risks, and driving AI-enabled improvements across cybersecurity programs. As a senior individual contributor, you will collaborate with Cybersecurity, Legal, Procurement, ERM, Technology, and business teams to ensure robust risk governance and scalable risk processes.