Third-Party Risk Management
1 month ago
Role: Third-Party Risk Management (TPRM) Analyst.
Location: Santa Clara, CA and San Jose, CA (Onsite).
Duration: 12+ Months.
The Role:
The Third-Party Risk Management (TPRM) Analyst will coordinate with IT stakeholders, project managers, and business owners to facilitate a vendor risk assessment to onboard a cloud solution or managed service. He/she will be responsible for collaborating with vendors for responses to TPRM vendor assessment questionnaire, perform third-party risk assessments in a timely manner, and facilitate the risk sign-off in accordance with established set of processes. He/She will comply with SLA's, provide periodic status updates to relevant stakeholders, and mature these processes over time in conjunction with customer Management.
Key Responsibilities:
- Follow the established foundational set of processes for onboarding a cloud solution or managed service.
- Coordinate input from multiple stakeholders to facilitate the review of the vendor.
- Perform risk assessments of third-party cloud solutions by reviewing responses to questionnaire, including supporting documents and information captured during discussions, to evaluate vendor's internal controls environment.
- Facilitate the risk sign-off in accordance with established set of processes.
- Maintain third-party risk assessment documentation within the defined structure.
- Generate metrics on solutions and report to customer management at agreed to frequency.
- Perform periodic ongoing risk assessment of implemented cloud solutions and managed services.
- Refine and mature TPRM processes over time, in conjunction with customer Management.
Preferred Experience:
- Be CISA/CTPRA/CCAK certified.
- Have at least 5 years of experience in IT, with 3 or more years of this experience in TPRM, risk assessments, and/or internal IT control testing/ IT audits.
- Have working knowledge of information security and risk frameworks/standards (i.e. ISO 27001/2, NIST 800-53, NIST CSF, SOC1/SOC2, CSA CCM and Shared Assessments SIG) and cloud security practices.
- Have knowledge of and the ability to use a PC as well as Microsoft Office Suite, Visio, and SharePoint software.
- Possess strong communication skills (both written and verbal).
- Possess strong interpersonal skills and can adapt information based on the audience.
- Be able to handle confidential information in a professional manner.
- Have the ability to recognize and communicate potential control related issues in a timely manner.
- Be a strong team player and able to work effectively with colleagues and management.
- Be highly organized and self-reliant, with the ability to multi-task.
- Have excellent process and time management skills.
- Able to appropriately identify issues and raise them to management by paying close attention to detail.
- Have the ability to listen effectively and communicate with honesty.
- Be able to acquire and evaluate data.
Academic Credentials:
- Have a Bachelor's degree or equivalent in Information Technology, Information Systems Management, Computer Science or related field.
-
Third Party Risk Program Manager
2 weeks ago
San Jose, California, United States Western Digital Full timeJob OverviewCompany Overview:At Western Digital, we strive to drive global innovation and redefine technological boundaries, making the seemingly impossible a reality.As a company built on problem-solving, we empower individuals to achieve remarkable feats through the right technology. Our contributions have been pivotal, including supporting monumental...
-
Program Manager
1 week ago
San Jose, California, United States Western Digital Full timeJob SummaryWe are seeking a highly skilled Program Manager - Third Party Risk Management to join our Procurement Digital Transformation and Operations organization's Third Party Risk Management team. As a key member of our team, you will be responsible for leading and managing projects aimed at ensuring effective governance and oversight of our Third Party...
-
Program Manager Third Party Risk Management
2 weeks ago
San Jose, United States Western Digital Full timeJob DescriptionAs a Program Manager - Third Party Risk Management in the Procurement Digital Transformation and Operations organization’s Third Party Risk Management team, you will be responsible for leading and managing projects aimed at ensuring effective governance and oversight of our Third Party partnerships and Procurement policies and procedures....
-
Third Party Risk Analyst
1 month ago
San Jose, United States Frontend Arts Full timeSmartsheet is a tech company with a human story to tell. Were here to empower teams to manage projects, automate workflows, and rapidly build new secure solutions, using simple no-code tools. Were revolutionaries so for us changing the way the world works is all in a days work. We are looking for an outstanding team member to drive results and help build and...
-
Senior Third-Party Risk Management Analyst
2 weeks ago
San Jose, California, United States KAnand Corporation Full timePosition: Senior Third-Party Risk Management AnalystLocation: RemoteDuration: Long-term ContractExperience: 10+ YearsNote: Candidates must possess valid work authorization in the USA.ROLE OVERVIEW:The Senior Third-Party Risk Management Analyst will engage with IT stakeholders, project leads, and business executives to oversee vendor risk evaluations...
-
Third Party Risk Management Program Lead
2 weeks ago
San Jose, California, United States Western Digital Full timePosition OverviewAs a Program Lead for Third Party Risk Management within the Procurement Digital Transformation and Operations division at Western Digital, you will take charge of directing and overseeing initiatives focused on ensuring robust governance and supervision of our Third Party collaborations as well as Procurement protocols.This role encompasses...
-
Third Party Risk Program Leader
2 weeks ago
San Jose, California, United States Western Digital Full timeJob OverviewCompany Overview:At Western Digital, we are driven by a vision to fuel global innovation and redefine the limits of technology, transforming the seemingly impossible into reality.As a company rooted in problem-solving, we empower individuals to achieve remarkable feats through the right technological solutions. Our contributions have historically...
-
Third Party Risk Program Leader
1 week ago
San Jose, California, United States Western Digital Full timeJob OverviewCompany Overview:At Western Digital, we strive to drive global innovation and redefine technological boundaries, making the seemingly impossible a reality.As a pivotal player in the tech industry, Western Digital is comprised of problem solvers who have consistently achieved remarkable feats through the right technology. Our contributions have...
-
Third Party Risk Assessment Analyst
1 week ago
San Jose, California, United States Frontend Arts Full timeFrontend Arts is a dynamic organization dedicated to empowering teams to enhance project management, streamline workflows, and create innovative secure solutions through user-friendly no-code tools. We are on a mission to transform the way businesses operate. We are seeking a talented individual to join our team and contribute to the development and...
-
Program Manager
4 weeks ago
San Jose, United States Western Digital Full timeJob DescriptionJob DescriptionCompany DescriptionAt Western Digital, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible.At our core, Western Digital is a company of problem solvers. People achieve extraordinary things given the right technology. For decades, we’ve been doing...
-
Third Party Risk Management Specialist
7 days ago
San Francisco, California, United States LendingClub Full timeAbout the RoleLendingClub's Third Party Risk Management (TPRM) team acts as the second line of defense against risks associated with outsourcing services to third parties. The Third Party Risk team works closely with various stakeholders, including Procurement, Risk SMEs, and Business Partners to onboard and manage vendors and other third parties, build...
-
Third-Party Risk Management specialist
2 months ago
San Antonio, United States Syntricate Technologies Full timeDescription: The Third-Party Risk Management specialist will be responsible for assessing, managing, and mitigating risks associated with third-party vendors and partners. This role involves collaborating with various internal and external stakeholders to ensure compliance with regulatory requirements and policies while safeguarding organization from...
-
San Jose, California, United States Western Digital Capital Full timeJob SummaryWe are seeking a highly experienced Senior Director to lead our Third Party Risk Management and Responsible Sourcing initiatives. As a key member of our Program Management team, you will be responsible for developing and implementing strategic policies and procedures to assess, onboard, monitor, and optimize third-party relationships.Key...
-
Third-Party Risk Management Analyst
2 weeks ago
San Francisco, California, United States DoorDash USA Full timeAbout DoorDashAt DoorDash, we are committed to building a reliable logistics platform that serves consumers, merchants, and drivers around the clock. Our team is dedicated to ensuring that our global infrastructure remains secure and efficient.Position OverviewThe Governance, Risk, and Compliance (GRC) team is in search of a skilled Third-Party Risk Analyst....
-
Third-Party Risk Management Analyst
2 weeks ago
San Francisco, California, United States DoorDash USA Full timeAbout DoorDashAt DoorDash, we are committed to creating the most reliable logistics platform for delivery services. Our team is dedicated to ensuring that our global infrastructure operates seamlessly, providing uninterrupted service to our diverse marketplace of consumers, merchants, and drivers.Position OverviewThe Governance, Risk, and Compliance (GRC)...
-
Third Party Risk Management Expert
2 weeks ago
San Francisco, California, United States Cloudflare Inc Full timeThe TeamWe are seeking a seasoned Security Risk Management Specialist to enhance our Governance, Risk, and Compliance division. This position entails executing vendor security evaluations, managing our vendor database, and overseeing Cloudflare's Third Party Risk Program.This is a chance to become part of a rapidly expanding and elite security team within a...
-
Third Party Risk Evaluation Specialist
2 weeks ago
San Francisco, California, United States Early Warning Services Full timePosition OverviewAt Early Warning Services, we have been safeguarding the U.S. financial ecosystem for over three decades with innovative solutions such as Zelle and PazeSM. As a reputable entity in the payments sector, we collaborate with numerous institutions to enhance access to financial services and secure transactions for millions of consumers and...
-
Third-Party Compliance Analyst
2 weeks ago
San Jose, California, United States VDart Inc Full timeJob OverviewPosition: Third-Party Risk Management (TPRM) AnalystCompany: VDart IncLocation: Santa Clara, CA and San Jose, CA (Onsite)Contract Duration: 12+ MonthsPosition Summary:The Third-Party Risk Management (TPRM) Analyst will play a pivotal role in collaborating with IT stakeholders, project managers, and business leaders to conduct vendor risk...
-
GRC Third-Party Risk Analyst
3 weeks ago
San Francisco, United States DoorDash USA Full timeCome help us build the world's most trusted on-demand, logistics engine for delivery! We're building a team of great minds to help us secure and maintain a 24x7, no downtime, global infrastructure system that powers DoorDash's multi-sided marketplace of consumers, merchants, and drivers. About the Role The Governance, Risk, and Compliance (GRC) team is...
-
San Francisco, United States Square Inc. Full timeCompliance Third-Party Risk Management Program ManagerFull-timeBlock is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the...
