TPRM Analyst

Integrity; Dallas (TX); On-site; USD 70,000 - 100,000; Full time

Job summary

Integrity, based in Dallas, Texas, is seeking a Third-Party Risk Management Analyst to lead the vendor due diligence program on the enterprise risk platform. You’ll focus on reducing the population of unassessed suppliers and establishing sustainable ongoing monitoring, serving as the first gate in the vendor intake process.

This role requires detail orientation, familiarity with assessment frameworks, and the ability to coordinate with procurement, contracting, legal, and cybersecurity.

Qualifications

• Bachelor’s degree in Business, Risk Management, Information Systems, Cybersecurity, or related field.
• 1–4 years of experience in third-party risk, vendor management, compliance, or security governance risk and compliance; internship experience will be considered
• Familiarity with vendor assessment frameworks and security questionnaire methodologies
• Understanding of how vendor access to systems, data, or facilities translates into organizational risk
• Experience working to defined service level targets across a queue of concurrent requests
• Strong analytical thinking and attention to detail, with accurate work across platforms and spreadsheets
• Strong written and verbal communication, including direct interaction with external vendors
• Organizational skills sufficient to manage a large assessment queue without items aging out
• Ability to read a security report and identify what actually matters to the organization
• Collaborative approach across procurement, legal, cybersecurity, and business unit stakeholders
• Proficiency in Microsoft Office Suite, with strong Excel capability
• Hands-on experience with a third-party risk platform such as Whistic, Archer, ServiceNow, or similar
• Professional certification such as CTPRP, CRISC, or similar
• Experience in insurance, financial services, or other regulated industries
• Familiarity with SOC 2 reports, NIST, ISO 27001, or HITRUST
• Exposure to procurement or contract management systems
• Experience supporting sanctions or denied-party screening processes

Responsibilities

• Run vendor intake, inherent risk tiering, and due diligence assessment on the enterprise third-party risk platform
• Reduce the backlog of suppliers that have not been formally risk assessed, working to an agreed prioritization based on access and criticality
• Assess vendors with access to enterprise systems, data, or physical facilities, ensuring no in-scope category is omitted
• Process vendor security questionnaires to closure within service level targets, coordinating with vendors and internal stakeholders to obtain required documentation
• Partner with Cybersecurity on technical vendor reviews and with Contracting and Legal on risk-relevant terms
• Serve as the first assessment gate in the vendor intake workflow so downstream functions engage only on vendors that clear
• Support integration between the third-party risk platform and the procurement system to avoid duplicated effort across teams
• Handle inbound due diligence requests and carrier annual audit responses through the trust center
• Establish and execute ongoing monitoring and periodic reassessment based on vendor tier
• Absorb the vendor population arriving through acquisitions and bring it into the assessment program
• Feed third-party risk findings into the enterprise risk register and reporting
• Maintain assessment documentation to an audit-ready standard suitable for control testing
• Support sanctions and denied-party screening activity in coordination with Procurement, and support documentation of how flagged results are reviewed and resolved

Skills

Analytical thinking

Attention to detail

Written and verbal communication

Organizational skills

Excel proficiency

Office Suite

Education

Bachelor's degree in Business, Risk Management, Information Systems, Cybersecurity, or related field

Tools

Whistic

Archer

ServiceNow

Job description

Position Summary

The Third-Party Risk Management Analyst runs the vendor due diligence program on the enterprise third-party risk platform. The organization engages thousands of suppliers, a substantial number of which have never been formally risk assessed, and the first mandate of this role is to reduce that population while establishing sustainable ongoing monitoring behind it.

The Third-Party Risk Management Analyst runs the vendor due diligence program on the enterprise third-party risk platform. The organization engages thousands of suppliers, a substantial number of which have never been formally risk assessed, and the first mandate of this role is to reduce that population while establishing sustainable ongoing monitoring behind it. Third-party exposure is one of the highest-probability incident vectors in the industry, and vendors with access to enterprise systems or physical facilities all fall within scope. This role also serves as the first gate in the vendor intake process, assessing risk before the organization commits the limited resources of procurement, contracting, legal, and cybersecurity. The ideal candidate is detail-oriented, comfortable with assessment frameworks, and looking for a strong entry point into a growing enterprise risk function.

Key Responsibilities

• Run vendor intake, inherent risk tiering, and due diligence assessment on the enterprise third-party risk platform
• Reduce the backlog of suppliers that have not been formally risk assessed, working to an agreed prioritization based on access and criticality
• Assess vendors with access to enterprise systems, data, or physical facilities, ensuring no in-scope category is omitted
• Process vendor security questionnaires to closure within service level targets, coordinating with vendors and internal stakeholders to obtain required documentation
• Partner with Cybersecurity on technical vendor reviews and with Contracting and Legal on risk-relevant terms
• Serve as the first assessment gate in the vendor intake workflow so downstream functions engage only on vendors that clear
• Support integration between the third-party risk platform and the procurement system to avoid duplicated effort across teams
• Handle inbound due diligence requests and carrier annual audit responses through the trust center
• Establish and execute ongoing monitoring and periodic reassessment based on vendor tier
• Absorb the vendor population arriving through acquisitions and bring it into the assessment program
• Feed third-party risk findings into the enterprise risk register and reporting
• Maintain assessment documentation to an audit-ready standard suitable for control testing
• Support sanctions and denied-party screening activity in coordination with Procurement, and support documentation of how flagged results are reviewed and resolved

Required Qualifications

• Bachelor's degree in Business, Risk Management, Information Systems, Cybersecurity, or a related field
• 1 to 4 years of experience in third-party risk, vendor management, compliance, or security governance risk and compliance; internship experience will be considered
• Familiarity with vendor assessment frameworks and security questionnaire methodologies
• Understanding of how vendor access to systems, data, or facilities translates into organizational risk
• Experience working to defined service level targets across a queue of concurrent requests
• Skills
• Strong analytical thinking and attention to detail, with accurate work across platforms and spreadsheets
• Strong written and verbal communication, including direct interaction with external vendors
• Organizational skills sufficient to manage a large assessment queue without items aging out
• Ability to read a security report and identify what actually matters to the organization
• Collaborative approach across procurement, legal, cybersecurity, and business unit stakeholders
• Proficiency in Microsoft Office Suite, with strong Excel capability
• Preferred Qualifications
• Hands-on experience with a third-party risk platform such as Whistic, Archer, ServiceNow, or similar
• Professional certification such as CTPRP, CRISC, or similar
• Experience in insurance, financial services, or other regulated industries
• Familiarity with System and Organization Controls 2 reports, NIST, ISO 27001, or HITRUST
• Exposure to procurement or contract management systems
• Experience supporting sanctions or denied-party screening processes

About Integrity

Integrity is one of the nation’s leading independent distributors of life, health and wealth insurance products. With a strong insurtech focus, we embrace a broad and innovative approach to serving agents and clients alike. Integrity is driven by a singular purpose: to help people protect their life, health and wealth so they can prepare for the good days ahead.

Integrity offers you the opportunity to start a career in a family-like environment that is rewarding and cutting edge. Why? Because we put our people first! At Integrity, you can start a new career path at company you’ll love, and we’ll love you back. We’re proud of the work we do and the culture we’ve built, where we celebrate your hard work and support you daily. Joining us means being part of a hyper-growth company with tons of professional opportunities for you to accelerate your career. Integrity offers our people a competitive compensation package, including benefits that make work more fun and give you and your family peace of mind.

Headquartered in Dallas, Texas, Integrity is committed to meeting Americans wherever they are — in person, over the phone or online. Integrity’s employees support hundreds of thousands of independent agents who serve the needs of millions of clients nationwide. For more information, visit Integrity.com.

Integrity, LLC is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, national origin, disability, veteran status, or any other characteristic protected by federal, state, or local law. In addition, Integrity, LLC will provide reasonable accommodations for qualified individuals with disabilities.