Third Party Risk Management (TPRM) Analyst

Mobility Global; Centreville (VA); On-site; USD 70,000 - 100,000; Full time

Job summary

Mobility is seeking a Third Party Risk Management (TPRM) Analyst in Centreville, VA to support end-to-end vendor risk management. You will oversee onboarding of new suppliers, continuous monitoring of high‑risk vendors, and reassessments in collaboration with Legal, Finance, procurement, and risk owners.

This role is ideal for someone early in their career who is highly organized, analytical, and capable of cross‑functional communication.

Qualifications

• Bachelor’s degree in Business, Supply Chain, Finance, or related field.
• 2–5 years of procurement, vendor management, or risk management experience.
• Basic understanding of third-party risk concepts and governance policies.
• Strong analytical, organizational, and communication skills.

Responsibilities

• Support onboarding and reassessment of third-party vendors by gathering information and documenting risks.
• Execute standardized third-party risk assessments under senior supervision.
• Track assessment status and ensure timely submissions with risk domain owners.
• Document risk findings and ratings, including inherent and residual risk scores.
• Assist in maintaining procedures, templates, and guidelines for vendor risk.
• Support internal and external audits of the vendor risk program.
• Help drive automation and AI-enabled tooling in the vendor risk program.

Skills

Analytical skills

Organizational skills

Communication skills

Cross-functional collaboration

Education

Bachelor's degree in Business/Supply Chain/Finance

Tools

LogicGate

Job description

The Third Party Risk Management (TPRM) Analyst supports the end-to-end management of the third-party risk management process by managing risk across our vendor landscape. This role reports to the TPRM Manager and will oversee the onboarding of new suppliers as well as continuous monitoring and reassessments of critical and high-risk vendors. This role will partner closely with other procurement teams, the corporate risk management team, legal, and risk domain owners across the organization to ensure assessments are completed and risks remediated.

This position is ideal for someone early in their career, interested in a career in GRC, and is a highly organized, analytical, and stakeholder-oriented professional who thrives in a fast-paced, build-from-scratch procurement environment.

Key Responsibilities

• Support the onboarding and reassessment of third-party vendors under procurement's purview by gathering information, documenting risks, facilitating stakeholder discussions, evaluating inherent and residual risk, and tracking follow-up actions and remediation activities.
• Execute standardized third-party risk assessments under the direction of senior team members.
• Track assessment status and follow up with risk domain owners to ensure timely submissions.
• Document risk findings and ratings, including inherent and residual risk scores.
• Assist in maintaining documentation of procedures, templates, and guidelines.
• Support internal and external audits of the vendor risk program.
• Support Procurement efforts to bring automation and AI-enabled tools into the vendor risk program and incorporate industry-leading practices.

Qualifications

Required

• Bachelor’s degree in Business, Supply Chain, Finance, or a related field
• 2-5 years of experience in procurement, vendor management, or risk management
• Basic understanding of third-party risk concepts and governance policies
• Strong analytical skills with the ability to interpret data
• Excellent organizational skills and attention to detail
• Strong written and verbal communication skills
• Experience working cross-functionally with Legal, Finance, Risk, and business stakeholders

Preferred

• Experience with LogicGate or other third-party risk management tools
• Familiarity with NIST CSF, NIST AI RMF, ISO 27001, ISO 31000, ISO 22301, or similar frameworks.
• Progress towards a relevant certification such as ISC2 CC, Security+, CISA, CRISC, CGRC, or similar credentials.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

It is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.