Strategic Third-Party Risk Analyst II

Intercontinental Exchange Holdings, Inc.; Atlanta (GA); On-site; USD 80,000 - 120,000; Full time

Job summary

Intercontinental Exchange, Inc. seeks a Third-Party Risk Management Risk Analyst II to support the end-to-end lifecycle management of vendor relationships.

You will conduct risk assessments, due diligence, and onboarding activities, ensuring alignment with regulatory requirements and ICE’s TPRM program. Collaborating with Legal, Compliance, Procurement, IT, and business units, you will identify control gaps, track remediation, generate risk reports, and maintain vendor records.

Qualifications

• Bachelor's degree in Finance, Risk Management, Information Systems, Cybersecurity, or a related field.
• 3-5+ years of experience in Third-Party Risk Management, Vendor Risk Management, Operational Risk, Information Security Risk, Audit, Compliance, or a related risk discipline.
• Experience conducting risk assessments, due diligence reviews, and control evaluations.
• Working knowledge of third-party risk management frameworks, governance practices, and lifecycle management processes.
• Understanding of regulatory guidance and industry standards (OCC, FFIEC, FDIC, CFPB, NIST, COBIT, COSO).
• Excellent communication skills to convey risk concepts to diverse audiences.
• Proficiency with Microsoft Office Suite (Excel, Word, PowerPoint, Outlook).

Responsibilities

• Conduct third-party risk assessments and due diligence for new and existing relationships.
• Evaluate vendor controls across information security, operational resilience, compliance, financial, and business continuity domains.
• Identify risks, control gaps, and policy exceptions; recommend mitigation strategies.
• Review SOC reports, financial statements, continuity plans, cybersecurity assessments, and regulatory artifacts.
• Perform inherent risk analyses to determine assessment scope and requirements.
• Support onboarding, ongoing monitoring, renewals, and termination activities throughout the vendor lifecycle.
• Track findings, remediation plans, and exception management to completion.
• Collaborate with Legal, Procurement, Compliance, Information Security, Privacy, and Operational Risk teams; guide stakeholders on TPRM requirements.
• Generate reports, metrics, and dashboards on assessment status, risk issues, and program performance.
• Maintain vendor records in TPRM systems and support audits.
• Assist with continuous improvement of TPRM processes, templates, and governance.
• Other Responsibilities: primary contact for assigned business areas; participate in special projects; occasional domestic travel; maintain in-office presence.

Skills

Risk management

Vendor risk

Regulatory knowledge

Analytical skills

Communication

MS Office

Time management

Cross-functional collaboration

Education

Bachelor's degree

Tools

ProcessUnity

ServiceNow

Archer

OneTrust

Job description

Intercontinental Exchange, Inc. seeks a Third-Party Risk Management Risk Analyst II to support the end-to-end lifecycle management of vendor relationships.

You will conduct risk assessments, due diligence, and onboarding activities, ensuring alignment with regulatory requirements and ICE’s TPRM program. Collaborating with Legal, Compliance, Procurement, IT, and business units, you will identify control gaps, track remediation, generate risk reports, and maintain vendor records.