Senior Third-Party Risk & Security Analyst

Claritev; United States; On-site; USD 135,000 - 145,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

Paid time off

Bonus opportunity

Professional development

Job summary

Claritev in the United States seeks a seasoned Third-Party Risk Management professional to support leadership in driving vendor risk assessments, onboarding, due diligence, ongoing monitoring, and deficiency management across complex environments.

You will collaborate with Procurement, Legal, Compliance, Privacy, IT and business teams to mature risk evaluation methodologies, enhance automation, and deliver actionable risk reporting with audit readiness. 5+ years in cybersecurity GRC required.

Qualifications

• At least 5+ years' experience in cybersecurity or information security GRC.
• Ability to interpret system architecture, data flows, and cloud/on-prem designs.
• Experience with vendor risk assessments and third-party governance.
• Familiarity with Onspring, Archer, LogicGate or similar GRC tools.

Responsibilities

• Serve as SME for third-party risk management and security governance throughout the vendor lifecycle.
• Collaborate with stakeholders to mature the TPRM program and dashboards.
• Execute and improve core TPRM workflows, risk assessments, evidence collection, and remediation tracking.
• Review vendor security artifacts such as SOC reports and questionnaires to assess risk.
• Produce metrics and reports on third-party risk exposure and program effectiveness.

Skills

Third-party risk

Vendor risk assessments

GRC programs

Security governance

Cloud security

Audit support

Stakeholder collaboration

Tools

Onspring

Archer

LogicGate

Job description

Claritev in the United States seeks a seasoned Third-Party Risk Management professional to support leadership in driving vendor risk assessments, onboarding, due diligence, ongoing monitoring, and deficiency management across complex environments.

You will collaborate with Procurement, Legal, Compliance, Privacy, IT and business teams to mature risk evaluation methodologies, enhance automation, and deliver actionable risk reporting with audit readiness. 5+ years in cybersecurity GRC required.