Third Party Vendor Analyst

Overview

GR8 Global is a firm forged by an affinity of top 100 accounting firms in the United States with the objective of coming together and redefining the workplace while providing additional value to our partners. We believe that there is a huge pool of talent outside of the US. Our mission is to bring together the best talent and match them with excellent work opportunities based on their core competencies, skill sets, and overall experience and exposure in the different areas of audit, accounting, and similar financial-related areas. We prioritize creating a positive and inclusive workplace culture where all talents are valued and developed.

We’re looking for a Third Party Vendor Analyst who will support and guide business stakeholders through the end-to-end Third-Party Risk Management (TPRM) process, including vendor onboarding, due diligence assessments, risk questionnaires, performance assessments, remediation activities, and vendor offboarding. The role will be responsible for reviewing vendor services and contracts to determine TPRM applicability, identifying and addressing control gaps, maintaining operational procedures, and collaborating with third parties, business units, Legal, Compliance, and other stakeholders. The ideal candidate will contribute to process improvements and ensure third-party risk activities align with regulatory requirements and organizational standards.

Responsibilities

• Assist business stakeholders with Third Party Risk Management activities, including risk questionnaires, performance assessments, and exit strategies, while providing responsive and professional support.
• Review contract details to determine the type of service provided by the vendor and determine if it is in scope for TPRM review.
• Conduct touchpoints and close out calls with business stakeholders to address open items such as control gaps identified during the due diligence assessment.
• Guide users through the end-to-end TPRM process from vendor onboarding to vendor off boarding.
• Adjust to new/updated processes to adhere to changes in the regulatory environment.
• Assist in maintaining operational procedures for TPRM processes.
• Collaborate with various stakeholders, including third party providers, business units, Legal, Compliance and other teams.
• Participate in process improvement activities, participating in TPRM special projects and other assessment related activities.

Qualifications

The individual will be a part of the Third Party Utility Team and is expected to work remotely.  The level of the position is commensurate with the experience and knowledge of the individual selected for the role.

• Bachelor’s degree in relevant field such as information security, cybersecurity, business administration, finance, or risk management. Relevant certifications (e.g. CTPRP, CISA, CRISC and/or CISSP certification).
• 1-5 years of experience in third-party risk management, vendor management, business controls, compliance, risk operations, or a related field.
• Strong analytical skills with high attention to detail and accuracy.
• Strong interpersonal and critical thinking skills with the ability to collaborate with others to deliver impactful results.
• Strong verbal and written communication skills, with the ability to clearly and confidently engage with people at all levels of the organization.
• Demonstrate an ability to establish and maintain effective working relationships at all levels within the organization
• Effective planning, time management, attention to detail, customer service and problem-solving skills.
• Support tasks from end to end with guidance, while building familiarity with GRC (Governance, Risk and Compliance) systems; RSA Archer experience is a plus.
• Proficient in using risk assessment and monitoring tools (e.g. Dun and Bradstreet, Fircosoft)
• Experience with Microsoft applications (Excel, Word, PowerPoint, and Visio)

WFH TECHNICAL REQUIREMENTS:

• Minimum Internet Speed: 50-100 Mbps

• Dedicated Home Office Area: Private, quiet workspace

• Business Continuity Plan: Power and Internet Backup is a MUST