Third-Party Risk Management Analyst

Veritis Group Inc; Plano (TX); On-site; USD 70,000 - 110,000; Full time

Job summary

Veritis Group Inc. is seeking a Remote Third-Party Risk Management Analyst to support the TPCRM program. The role balances cybersecurity engineering with project management to identify, track, mitigate, and report third‑party risks.

You will perform risk assessments, validate control effectiveness, and drive remediation plans while leveraging AI-driven automation and GRC tools. Collaboration with procurement, legal, and internal teams is essential.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, or related field or equivalent practical experience.
• 1–3 years of cybersecurity, third‑party risk management, IT risk, or compliance experience.
• Foundational understanding of cybersecurity principles and risk assessment methodologies.
• Experience coordinating across multiple stakeholders on projects.

Responsibilities

• Lead third‑party cyber risk initiatives across the full project lifecycle.
• Perform comprehensive cybersecurity risk assessments of third‑party partners and deliver actionable reports.
• Validate risk ratings, control evaluations, and remediation plans.
• Track remediation activities to ensure timely closure and alignment with risk tolerance.
• Leverage GRC platforms and AI automation to streamline assessments and evidence collection.
• Collaborate with security, procurement, legal, internal audit, and business teams.

Skills

Cybersecurity

Risk Management

Project Coordination

Communication

AI-driven Risk Mitigation

Education

Bachelor’s degree

Tools

GRC platforms

AI automation tools

Job description

Role: Third-Party Risk Management Analyst

Location: Remote

Duration: Long Term Contract

The Third‑Party Risk Management Analyst is responsible for supporting Third‑Party Cyber Risk Management (TPCRM) program by performing cybersecurity risk assessments, driving project execution, and improving risk management processes through automation and tooling. This role balances hands‑on cybersecurity engineering work with structured project management to ensure third‑party risks are identified, tracked, mitigated, and communicated effectively across the organization.

Summary:

• Lead Third‑Party Cyber Risk Management initiatives across the full project lifecycle, including planning, execution, stakeholder coordination, reporting, and ongoing monitoring
• Perform comprehensive cybersecurity risk assessments of third‑party partners, identify security gaps, and deliver clear, actionable assessment reports with minimal supervision
• Execute standardized inherent risk assessments and validate the accuracy of risk ratings, control evaluations, and remediation plans
• Track, document, and follow up on third‑party risk remediation activities to ensure timely closure and alignment with TMNA risk tolerance
• Leverage Governance, Risk, and Compliance (GRC) platforms and AI‑driven automation to streamline assessment workflows, reporting, and evidence collection
• Partner with cybersecurity, procurement, legal, internal audit, and business stakeholders to support consistent and scalable third‑party risk practices
• Support continuous improvement of TPCRM processes by identifying inefficiencies and recommending process or tooling enhancements
• Provide cybersecurity risk education to internal teams and third‑party partners, promoting secure behaviors and awareness of emerging threats
• Prepare metrics, dashboards, and summaries to support leadership visibility into third‑party cyber risk posture
• Utilize AI platforms and industry data to optimize assessment of workflows and enable greater focus on mitigating identified risks.
• Cybersecurity Fundamentals: Demonstrates a solid understanding of security controls, threats, and risk concepts
• Risk Assessment & Analysis: Ability to identify, assess, and document third‑party cyber risks and control gaps
• Project Management: Effectively plans, tracks, and executes work across multiple concurrent initiatives
• Process Improvement: Identifies opportunities to streamline workflows and improve operational efficiency
• Stakeholder Collaboration: Works effectively with cross‑functional teams and external partners
• Communication: Clearly communicates technical risk information to both technical and non‑technical audiences
• Attention to Detail: Produces accurate, well‑documented assessments and maintains reliable risk records
• AI-Driven Risk Mitigation: Leverages AI platforms and industry partnerships to accelerate risk identification and maximize time spent on executing risk reduction.

Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience
• 1–3 years of experience in cybersecurity, third‑party risk management, IT risk, compliance, or a related discipline
• Foundational understanding of cybersecurity principles, risk assessment methodologies, and common security control frameworks
• Experience supporting projects or initiatives that require coordination across multiple stakeholders