TPRM / User Access Review Analyst

DKKD Staffing; New York (NY); Hybrid; USD 70,000 - 90,000; Full time

Benefits offered by this job

All expenses covered for travel, lodging, and per-diem

Job summary

DKKD Staffing is seeking a TPRM / User Access Review Analyst for a contract role lasting 9-12 months, potentially longer. This remote/hybrid position involves supporting a third-party risk management program and user access reviews for a financial-services cybersecurity engagement.

The ideal candidate must be a US citizen or a legal permanent resident and demonstrate strong communication skills and professionalism. Experience in vendor risk, GRC, and audit/control evidence are critical for success in this role.

Qualifications

• US Citizenship or Legal/Permanent Resident is required.
• Experience with vendor/security assessments and risk management.
• Proven ability to handle stakeholder follow-up and onboarding systems.

Responsibilities

• Support the third-party risk management program.
• Perform user access review workstreams and vendor assessments.
• Validate controls and conduct risk writeups.

Skills

Clear written communication

Experience in TPRM

Professionalism

Knowledge of GRC

Audit/control evidence

Tools

Conductor One

Job description

TPRM / User Access Review Analyst

Duration: Contract 9-12 months, possibly longer.

Pay: Market Rate

Location: Remote/Hybrid 90% offsite (maybe 100% for some). Onsite is downtown Manhattan.

Note: All expenses paid by the client for travel, lodging and per-diem

Industry: Investment firms for a financial-services cybersecurity engagement

Citizenship: Must be US Citizen or Legal/Permanent Resident Green Card

Requirements: Clear written communication, experience, professionalism, and quality work are a must. Support an existing third-party risk management program and user access review workstream. Likely work includes vendor/security assessments, SOC 2 / ISO / HIPAA-style evidence review, control validation, risk writeups, stakeholder follow-up, and onboarding systems into an access-review platform such as Conductor One.

Strong fit: TPRM, vendor risk, GRC, security assessments, identity governance, user access reviews, and audit/control evidence.