Third-Party Risk Management Analyst

Ladders; United States; On-site; USD 111,000 - 167,000; Full time

Benefits offered by this job

Remote work flexibility

Professional development stipend

Health and parental leave

RSU grants / equity opportunities

Bonus potential

Job summary

Ladders is seeking a remote Third-Party Risk Management Analyst in the United States to assess and govern third-party security risk across the vendor lifecycle. You will partner with Legal, Procurement and Security to strengthen controls, support onboarding, and align vendor risk with business growth.

This role emphasizes governance, remediation, reporting, and maturing a fast-moving risk program while enabling efficient workflows and automation.

Qualifications

• 5+ years of experience in third-party/vendor risk management, GRC, or information security compliance.
• Experience using automation, scripting, or low-code workflows in vendor risk management.
• Hands-on experience conducting vendor security assessments and managing a vendor tiering program.
• Experience collaborating with Legal and Procurement on vendor contract security terms.
• Residing in the US, excluding San Francisco Bay Area, New York City, and Washington, D.C.

Responsibilities

• Lead comprehensive third-party security risk assessments and recommend risk ratings
• Manage the cadence and remediation process for vendor reassessments
• Collaborate with Legal and Procurement on vendor onboarding contracts to ensure compliance
• Escalate unresolved vendor risks to Security leadership and relevant stakeholders
• Support internal and external audits of the vendor risk program
• Develop metrics and dashboards for monitoring third-party risk posture
• Drive automation and AI initiatives within vendor risk workflows, enhancing efficiency
• Mentor junior team members to ensure alignment with rapid business growth

Skills

Vendor risk management

Automation

Scripting

Low-code workflows

Vendor security assessments

Job description

For our client, we are seeking a Third-Party Risk Management Analyst to join the team of a leader in the Enterprise Technology space.

This role will focus on assessing and managing third-party security risk across the vendor lifecycle, with an emphasis on governance, remediation, and risk visibility. You will partner closely with Legal, Procurement, and Security leadership to strengthen controls, support compliant onboarding, and keep vendor risk practices aligned with business growth. The position also includes building reporting, improving workflow efficiency, and helping mature a fast-moving risk program.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $110,670 – $167,400 annually

Responsibilities

• Lead comprehensive third-party security risk assessments and recommend risk ratings
• Manage the cadence and remediation process for vendor reassessments
• Collaborate with Legal and Procurement on vendor onboarding contracts to ensure compliance
• Escalate unresolved vendor risks to Security leadership and relevant stakeholders
• Support internal and external audits of the vendor risk program
• Develop metrics and dashboards for monitoring third-party risk posture
• Drive automation and AI initiatives within vendor risk workflows, enhancing efficiency
• Mentor junior team members to ensure alignment with rapid business growth

Qualifications

• 5+ years of experience in third-party/vendor risk management, GRC, or information security compliance
• Experience using automation, scripting, or low-code workflows in vendor risk management
• Hands-on experience conducting vendor security assessments and managing a vendor tiering program
• Experience collaborating with Legal and Procurement on vendor contract security terms
• Residing in the US, excluding certain metro areas: San Francisco Bay Area, New York City, and Washington, D.C.

Benefits

• Flexible, employee-led remote work model allowing for a balanced work-life structure
• Professional development stipend encouraging continuous learning and growth
• Comprehensive health and parental leave plans for employee support
• Employee equity options through RSU grants, enhancing long-term investment in the company
• Above-average total compensation, including performance-based bonuses and high-growth equity opportunities

Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.