Senior Vendor Risk Analyst: TPRM Expert

Evolution Cloud Services (EVOCS); Denver (CO); On-site; USD 130,000 - 170,000; Full time

Job summary

Evolution Cloud Services (EVOCS) is seeking a Senior TPRM Analyst to own complex third-party risk reviews across cloud providers, MSPs, and critical technology vendors. You will escalate findings and write executive-ready risk summaries for leadership reviews.

This senior individual contributor role emphasizes depth of judgment and strong collaboration with business, technology, and procurement stakeholders to manage risk in a dynamic environment.

Qualifications

• 7+ years of experience in cybersecurity, risk, audit, or compliance.
• At least 5 years in third-party risk management or vendor risk.
• Fluency reading SOC 2 reports and ISO 27001 certifications, including scope carve-outs and control exceptions.
• Experience writing executive-ready risk summaries and risk acceptance recommendations.

Responsibilities

• Own end-to-end risk assessments for high-criticality third parties (cloud providers, MSPs, and critical vendors).
• Read and interpret SOC 2 Type II and ISO 27001 reports beyond mere existence of documents.
• Evaluate control evidence, remediation plans, and security questionnaires; challenge weak answers.
• Set inherent and residual risk ratings; define compensating controls; track remediation.
• Map fourth-party dependencies and assess concentration risk across vendors.
• Present risk posture, trends, and exceptions to governance forums and senior leadership.
• Mentor junior analysts on evidence review and stakeholder handling.

Skills

Vendor risk management

Cybersecurity

Risk assessment

Executive communication

Stakeholder management

SOC 2 & ISO 27001

Job description

Evolution Cloud Services (EVOCS) is seeking a Senior TPRM Analyst to own complex third-party risk reviews across cloud providers, MSPs, and critical technology vendors. You will escalate findings and write executive-ready risk summaries for leadership reviews.

This senior individual contributor role emphasizes depth of judgment and strong collaboration with business, technology, and procurement stakeholders to manage risk in a dynamic environment.