Third-Party Risk Analyst

Nelnet; Centennial (CO); Hybrid; USD 60,000 - 70,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K/retirement plan

Tuition reimbursement

Job summary

Nelnet is seeking a Third-Party Risk Analyst to join our Risk Management team. This role focuses on risk assessments and oversight of third-party relationships, identifying risk gaps, and guiding remediation in line with regulatory standards.

You will partner with senior colleagues and internal stakeholders to mature Nelnet's risk program. Annual compensation ranges from $60,000 to $70,000, with a hybrid work option.

Qualifications

• 1-3 years in risk management, third-party risk management, audit, cybersecurity, or compliance.
• Education or certifications in risk, audit, cyber, or project management preferred.
• Familiarity with regulatory requirements and frameworks such as SOC 1/SOC 2, ISO, NIST, and others.

Responsibilities

• Facilitate third-party risk assessments for new and existing third-party relationships, with guidance from senior team members as needed.
• Assist in assessing fourth-party and subcontractor risk exposure for third-party relationships.
• Review and analyze documentation provided by the third-party, document assessment results, identify risk gaps, and recommend remediation actions aligned with Regulatory Requirements and Nelnet standards.
• Deliver reporting, dashboards, and analytics for ongoing oversight, trends, and escalation.
• Support the ongoing maintenance and administration of third-party policies, procedures, and guidelines.
• Partner with internal stakeholders and subject matter experts to support the third-party risk management lifecycle.
• Build and maintain strong cross-functional relationships across business segments to support collaboration throughout the third-party risk management lifecycle.
• Utilize existing tools and technology, including AI, to support process efficiency, and identify opportunities for improvement.
• Maintain awareness of emerging risks and industry trends through continued education and research, sharing relevant insights with the team.
• Participate in and support the delivery of third-party risk management training for Nelnet Associates.

Skills

Risk assessment

Regulatory knowledge

Communication

Independent work

Documentation

Cross-functional collaboration

Education

Bachelor's in technology, risk, business, or related field

Tools

SOC 1/SOC 2 familiarity

ISO/NIST frameworks

Auditing tools

Job description

Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer, professional services company, consumer loan originator and servicer, payments processor, renewable energy solutions, and K-12 and higher education expert. For over 40 years, Nelnet has been serving its customers, associates, and communities.

The perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team, you're part of a community invested in the success of each individual. That support comes through in our work, as we are united by our mission of creating opportunities for people where they live, learn, and work.

The Third-Party Risk Analyst is a contributor within Nelnet's Risk Management team. This role supports risk assessments and ongoing oversight of third-party relationships across the organization. This role helps safeguard Nelnet against key risks by evaluating third-party controls, identifying risk gaps, and recommending remediation aligned with regulatory requirements and internal standards. The Analyst partners closely with senior team members and internal stakeholders to support the third-party risk management lifecycle and contributes to process improvements that support the continued maturity of the Third-Party Risk Management Program.

Job Responsibilities

• Facilitate third-party risk assessments for new and existing third-party relationships, with guidance from senior team members as needed.
• Assist in assessing fourth-party and subcontractor risk exposure for third-party relationships.
• Review and analyze documentation provided by the third-party, document assessment results, identity risk gaps, and recommend remediation actions aligned with Regulatory Requirements and Nelnet standards.
• Deliver reporting, dashboards, and analytics for ongoing oversight, trends, and escalation.
• Support the ongoing maintenance and administration of third-party policies, procedures, and guidelines.
• Partner with internal stakeholders and subject matter experts to support the third-party risk management lifecycle.
• Build and maintain strong cross-functional relationships across business segments to support collaboration throughout the third-party risk management lifecycle.
• Utilize existing tools and technology, including AI, to support process efficiency, and identify opportunities for improvement.
• Maintain awareness of emerging risks and industry trends through continued education and research, sharing relevant insights with the team.
• Participate in and support the delivery of third-party risk management training for Nelnet Associates.

Annual compensation range for this role is $60,000-$70,000 depending on experience.

This position offers a hybrid work option. Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates living within 30 miles of an office location to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence three days per week.

Please note that we are unable to provide visa sponsorship for this position. To be considered, candidates must already be authorized to work in the United States without the need for current or future sponsorship.

Education

• Bachelor's in technology, risk, business, or related field (equivalent experience may substitute).

Experience

• 1-3 years in risk management, third-party risk management, audit, cybersecurity, or compliance.
• Education or certifications in risk, audit, cyber, or project management preferred.
• Familiarity with regulatory requirements and frameworks such as SOC 1/SOC 2, ISO, NIST, and others.

Competencies/Skills

• Ability to review and interpret vendor documentation to support risk assessments and identify control gaps.
• Sound judgment to identify risk gaps and elevate issues appropriately based on risk severity.
• Self-starter with the ability to work independently, communicate clearly, and elevate issues effectively to stakeholders.
• Strong organizational skills to manage concurrent assessments and maintain audit-ready documentation.
• Ability to collaborate effectively with internal stakeholders and subject matter experts across the third-party risk management lifecycle.

Our benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program.

Nelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal Opportunity Employer, we ensure that all qualified applicants are considered for employment. Employment decisions are made without regard to race, color, religion/creed, national origin, gender, sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by federal, state, or local law. We value the unique contributions of every team member and believe that a positive work environment benefits everyone.

Qualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Corporate Recruiting at 402-486-5725 or [e-mail] .

Nelnet is a Drug Free and Tobacco Free Workplace.

Use of Artificial Intelligence in Hiring

We may use automated or artificial intelligence enabled tools to assist with the initial review of applications, such as identifying relevant skills or experience. These tools are used to support human review and do not make hiring decisions. A recruiter reviews applications and determines which candidates move forward in the hiring process. For more information, see our Privacy Policy and Pre-Use Notice: Automated Tools in Hiring

You may know Nelnet as the nation's largest student loan servicer -- but we do more than that. *A lot more.* We're also a professional services company, consumer loan originator and servicer, payment processor, renewable energy innovator, and K-12 and higher education expert (and that's just a shortlist). For over 40 years, we've been serving our customers, associates, and communities to make dreams possible.

EEO Info (https://nelnetinc.com/wp-content/uploads/EEO-poster.pdf) | EEO Letter (https://nelnet.com/wp-content/uploads/EEO-Jeffs-Letter.pdf) | EPPA Info (https://nelnetinc.com/wp-content/uploads/Employee-Polygraph-Protection-Act-Poster.pdf) | FMLA Info (https://nelnetinc.com/wp-content/uploads/FMLA-Leave.pdf)