1

Contract Third Party Risk Analyst Jobs in California

Designs and manages complex data sets and draws conclusions related to third party and contract ... Provides specialized advice and risk analysis results to various departments throughout the Company.

Designs and manages complex data sets and draws conclusions related to third party and contract ... Provides specialized advice and risk analysis results to various departments throughout the Company.

Senior Fintech Risk Analyst

San Francisco, CA · On-site

$122.72 - $137.50/hr

They own oversight of our strategic third-party partners, risk governance across the enterprise ... Analyze 4th-Party Risk Ecosystems: Conduct the risk analysis and due diligence for 4th-party ...

Senior Fintech Risk Analyst

Sunnyvale, CA · On-site

$122.72 - $137.50/hr

They own oversight of our strategic third-party partners, risk governance across the enterprise ... Analyze 4th-Party Risk Ecosystems: Conduct the risk analysis and due diligence for 4th-party ...

Review contracts for non‑standard security language when flagged by Legal or deal desk, and recommend redlines * Maintain the vendor and AI/model risk register, feeding findings into the company ...

Experience: 1-4 years in enterprise risk, third-party risk, GRC, information security, or a related ... Strong analytical, organizational, stakeholder-management, and written and verbal communication ...

next page

Showing results 1-20

Contract Third Party Risk Analyst information

See California salary details

$15

$39

$65

How much do contract third party risk analyst jobs pay per hour?

As of Aug 30, 2026, the average hourly pay for contract third party risk analyst in California is $39.96, according to ZipRecruiter salary data. Most workers in this role earn between $29.42 and $48.65 per hour, depending on experience, location, and employer.

What is a contract third party risk analyst?

A Contract Third Party Risk Analyst is a professional who evaluates and manages the risks associated with an organization's external vendors, suppliers, or partners. Their main role is to assess the security, compliance, and operational risks that third parties might pose, especially when handling sensitive data or critical business functions. They often review contracts, conduct risk assessments, and ensure that third parties comply with relevant regulations and internal policies. This helps organizations reduce potential financial, reputational, or legal impacts from working with external entities.

What are the key skills and qualifications needed to thrive as a contract third party risk analyst?

To thrive as a Contract Third Party Risk Analyst, you need a solid understanding of risk management, vendor assessment processes, and relevant regulatory frameworks, often supported by a degree in business, finance, or a related field. Familiarity with risk assessment tools, contract management systems, and certifications such as CTPRA (Certified Third Party Risk Assessor) is highly valuable. Strong analytical skills, attention to detail, and effective communication enable you to identify risks and work collaboratively with stakeholders. These skills ensure organizations can mitigate vendor-related risks and maintain compliance in an increasingly complex regulatory environment.

What are common challenges faced by contract third party risk analysts when evaluating new vendors?

Contract Third Party Risk Analysts often encounter challenges such as incomplete or inconsistent documentation from vendors, rapidly changing regulatory requirements, and time constraints for onboarding. They must balance thorough due diligence with business needs for efficiency, often working closely with procurement, legal, and IT security teams. Building strong communication skills and developing robust assessment templates can help analysts efficiently identify and mitigate potential risks while maintaining positive vendor relationships.

What is the difference between Contract Third Party Risk Analyst vs Vendor Risk Analyst?

AspectContract Third Party Risk AnalystVendor Risk Analyst
CertificationsCertifications like CTPRP, CRISC often preferredSimilar certifications, often including CTPRP or CRISC
Work EnvironmentTypically in finance, healthcare, or corporate sectors managing third-party risksSimilar industries, focusing on vendor assessments and risk mitigation
Employer UsageUsed by organizations managing contractual third-party relationshipsCommonly employed by companies evaluating vendor and supplier risks

The Contract Third Party Risk Analyst and Vendor Risk Analyst roles share many similarities, including required certifications and work environments. Both focus on assessing and mitigating risks associated with external entities, but the Contract Third Party Risk Analyst often emphasizes contractual obligations, while the Vendor Risk Analyst concentrates on evaluating vendor performance and compliance.

What are the most commonly searched types of Third Party Risk Analyst jobs in California?

The most popular types of Third Party Risk Analyst jobs in California are:

What are popular job titles related to Contract Third Party Risk Analyst jobs in California?

For Contract Third Party Risk Analyst jobs in California, the most frequently searched job titles are:

What job categories do people searching Contract Third Party Risk Analyst jobs in California look for?

The top searched job categories for Contract Third Party Risk Analyst jobs in California are:

What cities in California are hiring for Contract Third Party Risk Analyst jobs?

Cities in California with the most Contract Third Party Risk Analyst job openings:

Infographic showing various Contract Third Party Risk Analyst job openings in California as of August 2026, with employment types broken down into 80% Full Time, and 20% Contract. Highlights an 100% In-person job distribution, with an average salary of $83,107 per year, or $40 per hour.

Senior Third Party Risk Analyst

San Diego, CA • On-site

Full-time

Medical, Dental, Vision, Retirement, PTO

Posted 9 days ago


Job description

Are you looking to make an impactful difference in your work, yourself, and your community? Why settle for just a job when you can land a career? At ICW Group, we are hiring team members who are ready to use their skills, curiosity, and drive to be part of ourjourney as we strive to transform the insurancecarrier space. We're proud to be in business for over 50 years, and its change agents like yourself that will help us continue to deliver our mission to create the best insurance experience possible.


Headquartered in San Diego with regional offices located throughout the United States, ICW Group has been named for the twelfth consecutive year in a row and for the 20th time overall as a Top 50 performing P&C organization offering the stability of a large, profitable and growing company combined with a focus on all things people. It's our team members who make us an employer of choice and the vibrant company we are today. We strive to make both ourinternal and external communities better everyday! Learn more about why you want to be here!


PURPOSE OF THE JOB

The purpose of this job is to provide full-service enterprise third party risk services required to analyze and assess third party products/third parties for level of risk to the organization's financial plans and goals for growth. This position exists to ensure compliance with regulatory requirements, such as NYDFS.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Recommends and implements innovations to continuously improve processes.

  • Manages third party risk program templates, tools, procedures, and processes and updates as necessary.
  • Designs and maintains Third Party Risk program tools, such as third party risk scorecards, risk assessments, workflows, reports and process improvement initiatives.
  • Trains team members on tools and processes to ensure standards for purchasing are met.
  • Partners and collaborates with the Legal, Information Security, IT, Finance and Business Continuity departments with complex risk assessments and related contractual matters.

Gathers data for preparing reports and documents as requested.

  • Synthesizes and prepares data for inclusion in reports and departmental presentations as requested.
  • Prepares market analysis or data related to third party risk as necessary.
  • Designs and manages complex data sets and draws conclusions related to third party and contract data.
  • Maintains current knowledge of trends and best practices for third party risk and insurance industry.

Analyzes the risk posed by third parties in the purchasing and third party relationship.

  • Executes a risk-based engagement and monitoring program consistent with the third party risk program, regulatory requirements and third party Company policies.
  • Produces robust governance and oversight reporting consistent with risk rating and program requirements.
  • Analyzes complex financial reports and risk related reports to assess the third party's financial viability and business legitimacy.
  • Uses independent judgment based on data compilation and well documented processes to recommend or disqualify third parties from consideration in doing business with ICW Group.
  • Completes information security review by assessing required third party documentation such as SOC reports, incident response plans and Cloud security protocols.

Executes the third party risk management life cycle to include planning, due diligence, negotiation, ongoing monitoring, and termination of third party relationships.

  • Manages relationships with third parties, current and prospective third parties, and other external constituencies involved in the third party risk program.
  • Completes due diligence risk assessments, including financial viability reviews and information security requirements for potential ICW Group third parties.
  • Vets third parties and negotiates terms related to risk remediation that are consistent with regulatory requirements and policies of ICW Group.
  • Assesses third party on-going financial and commercial viability and identifies associated risks.
  • Monitors third party performance for consistency with service level expectations.
  • Collects and reviews supporting documentation for potential and existing Third Parties.
  • Drives completion of ongoing assessments of ICW GROUP Third Parties.
  • Manages library of Third Party documentation, scorecards and other applicable documents in applicable systems.
  • Manages process improvements, contract standardization, and other departmental projects.

Provides specialized advice and risk analysis results to various departments throughout the Company.

  • Provides vetted third party related data and recommendations to business stakeholders in departments such as legal, compliance, information security, information technology and finance.
  • Articulates and presents recommendations to stakeholders based on findings during the third party analysis process including financial strength data, information security practices and other operational risk measurements.
  • Advises Buyers and other internal procurement professionals in third party risk assessments during selection and vetting.
  • Audits current third party relationships and proactively escalates deficient third parties to the appropriate party, such as internal legal and finance leaders.
  • Ensures satisfactory outcomes of regulatory audits and exams.

SUPERVISORY RESPONSIBILITIES

This position has no supervisory responsibility.

EDUCATION AND EXPERIENCE

Bachelor's degree from a four-year college or university with a major or emphasis in Finance, Data Science, Information Security or related field; or equivalent combination of education and experience. Minimum 5-7 years of experience working with third party contracts, information security protocol documentation or financial documentation required. Previous experience with operational risk analysis, including IT risks, software risks and security risks preferred. Extensive experience with Microsoft Excel, Word, Visio and PowerPoint. Prior experience with governance, risk and compliance (GRC) tools and contract negotiation preferred.

CERTIFICATES, LICENSES, REGISTRATIONS

One or more of the following certifications are preferred: Amazon Web Services (AWS) Certified Cloud Practitioner certification or similar Cloud based technology certification. Certified Regulatory Vendor Program Manager (CRVPM), Certified in Risk and Information Systems Control (CRISC), Certified Third Party Risk Professional (CTPRP), Certified Internal Auditor (CIA), Certified Financial Services Auditor (CFSA), Certified Fraud Examiner (CFE).

KNOWLEDGE AND SKILLS

Knowledge of regulatory third party standards including New York Department of Financial Services cybersecurity (NYDFS), Office of the Comptroller of the Currency (OCC), Federal Financial Institutions Examination Council (FFIEC), and Consumer Financial Protection Bureau (CFPB). Ability to work with mathematical concepts such as probability and statistical inference. Ability to apply principles of logical or scientific thinking to a wide range of intellectual and practical situations. Ability to hypothesize on root cause of inefficiencies and then test out probable solutions against those hypotheses. Ability to analyze complex sets of data and develop creative solutions to support business needs. Ability to read, analyze, and interpret technical journals, financial reports, contracts and other related documents. Excellent interpersonal and communication skills with ability to directly influence others. Ability to accept new ideas and embrace change. Demonstrated organizational and time management skills. Must be capable of coordinating and organizing input from various channels, perform negotiation, resolve conflicts and build consensus at all levels of the organization. Must be able to read, write and speak English effectively. Excellent interpersonal, communication and listening skills are a must.

PHYSICAL REQUIREMENTS

While performing the duties of this job, the employee is frequently required to sit. The employee is regularly required to stand; walk; reach with hands and arms; stoop, kneel, crouch, or crawl; talk and hear. The employee must occasionally lift and/or move up to 30 pounds. Specific vision abilities required by this job include close vision. The worker is required to have visual acuity and be capable of operating and viewing computers and other electronic devices for extended periods of time.

WORK ENVIRONMENT

This position operates in an office environment and requires the frequent use of a computer, telephone, copier, and other standard office equipment. The noise level in the office is usually moderate.

We are currently not offering employment sponsorship for this opportunity.

#LI-JM1

#LI-Hybrid


The current range for this position is

$78,678.61 - $132,686.15

This range is exclusive of fringe benefits and potential bonuses. If hired at ICW Group, your final base salary compensation will be determined by factors unique to each candidate, including experience, education and the location of the role and considers employees performing substantially similar work.


WHY JOIN ICW GROUP?

  • Challenging work and the ability to make a difference
  • You will have a voice and feel a sense of belonging
  • We offer a competitive benefits package, with generous medical, dental, and vision plans as well as 401K retirement plans and company match
  • Bonus potential for all positions
  • Paid Time Off
  • Paid holidays throughout the calendar year
  • Want to continue learning? We'll support you 100%


ICW Group is committed to creating a diverse environment and is proud to be an Equal Opportunity Employer. ICW Group will not discriminate against an applicant or employee on the basis of race, color, religion, national origin, ancestry, sex/gender, age, physical or mental disability, military or veteran status, genetic information, sexual orientation, gender identity, gender expression, marital status, or any other characteristic protected by applicable federal, state or local law.

___________________

Job Category

Shared Services