1

Contract Third Party Risk Analyst Jobs in Virginia

Third-Party Risk Analyst

Mclean, VA · On-site

$45 - $47/hr

Third-Party Risk Analyst Location: McLean, VA (5 days - Onsite) Job Overview The Third-Party Risk Analyst will support Enterprise Operationally Critical Third Parties (EOCTP) and Enterprise ...

As our new Third Party Risk Analyst , you will play a critical role in protecting Anaplan by managing the risks associated with our third-party suppliers and reporting to our legal team. You will be ...

As our new Third Party Risk Analyst , you will play a critical role in protecting Anaplan by managing the risks associated with our third-party suppliers and reporting to our legal team. You will be ...

As our new Third Party Risk Analyst , you will play a critical role in protecting Anaplan by managing the risks associated with our third-party suppliers and reporting to our legal team. You will be ...

Description Sponsorship Oversight Network Compliance Analyst Citizens Bank sponsors payment ... Familiarity with PCI DSS, Account Data Compromise (ADC), and thirdparty risk oversight Education:

Third Party Risk Analyst

Glen Allen, VA · On-site

$86K - $101K/yr

Description Sponsorship Oversight Network Compliance Analyst Citizens Bank sponsors payment ... Familiarity with PCI DSS, Account Data Compromise (ADC), and thirdparty risk oversight Education:

next page

Showing results 1-20

Contract Third Party Risk Analyst information

What are the key skills and qualifications needed to thrive as a Contract Third Party Risk Analyst, and why are they important?

To thrive as a Contract Third Party Risk Analyst, you need a solid understanding of risk management, vendor assessment processes, and relevant regulatory frameworks, often supported by a degree in business, finance, or a related field. Familiarity with risk assessment tools, contract management systems, and certifications such as CTPRA (Certified Third Party Risk Assessor) is highly valuable. Strong analytical skills, attention to detail, and effective communication enable you to identify risks and work collaboratively with stakeholders. These skills ensure organizations can mitigate vendor-related risks and maintain compliance in an increasingly complex regulatory environment.

What are common challenges faced by Contract Third Party Risk Analysts when evaluating new vendors?

Contract Third Party Risk Analysts often encounter challenges such as incomplete or inconsistent documentation from vendors, rapidly changing regulatory requirements, and time constraints for onboarding. They must balance thorough due diligence with business needs for efficiency, often working closely with procurement, legal, and IT security teams. Building strong communication skills and developing robust assessment templates can help analysts efficiently identify and mitigate potential risks while maintaining positive vendor relationships.

What is a Contract Third Party Risk Analyst?

A Contract Third Party Risk Analyst is a professional who evaluates and manages the risks associated with an organization's external vendors, suppliers, or partners. Their main role is to assess the security, compliance, and operational risks that third parties might pose, especially when handling sensitive data or critical business functions. They often review contracts, conduct risk assessments, and ensure that third parties comply with relevant regulations and internal policies. This helps organizations reduce potential financial, reputational, or legal impacts from working with external entities.

What is the difference between Contract Third Party Risk Analyst vs Vendor Risk Analyst?

AspectContract Third Party Risk AnalystVendor Risk Analyst
CertificationsCertifications like CTPRP, CRISC often preferredSimilar certifications, often including CTPRP or CRISC
Work EnvironmentTypically in finance, healthcare, or corporate sectors managing third-party risksSimilar industries, focusing on vendor assessments and risk mitigation
Employer UsageUsed by organizations managing contractual third-party relationshipsCommonly employed by companies evaluating vendor and supplier risks

The Contract Third Party Risk Analyst and Vendor Risk Analyst roles share many similarities, including required certifications and work environments. Both focus on assessing and mitigating risks associated with external entities, but the Contract Third Party Risk Analyst often emphasizes contractual obligations, while the Vendor Risk Analyst concentrates on evaluating vendor performance and compliance.

What are the most commonly searched types of Third Party Risk Analyst jobs in Virginia? The most popular types of Third Party Risk Analyst jobs in Virginia are:
What are popular job titles related to Contract Third Party Risk Analyst jobs in Virginia? For Contract Third Party Risk Analyst jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Contract Third Party Risk Analyst jobs in Virginia look for? The top searched job categories for Contract Third Party Risk Analyst jobs in Virginia are:
What cities in Virginia are hiring for Contract Third Party Risk Analyst jobs? Cities in Virginia with the most Contract Third Party Risk Analyst job openings:

Third-Party Risk Analyst

DRC Systems

Mclean, VA • On-site

$45 - $47/hr

Contractor

Posted 25 days ago


Job description

Title: Third-Party Risk Analyst
Location: McLean, VA (5 days - Onsite)
 
Job Overview
The Third-Party Risk Analyst will support Enterprise Operationally Critical Third Parties (EOCTP) and Enterprise Vulnerability Incident Management (VIM) programs. This role partners closely with Governance Advisors and enterprise stakeholders to drive risk oversight, data analysis, reporting, and program execution within a financial services environment.
 
Key Responsibilities
Risk & Program Management
  • Partner with the Governance Advisor to execute EOCTP and VIM programs.
  • Ensure divisions comply with internal guidance for managing third-party risk.
  • Support crisis response activities involving third parties.
  • Project manage the data management platform supporting EOCTP and VIM.
  • Launch and review risk assessments across operational, financial, legal/compliance, reputational, and lifecycle domains.
  • Analyze program requirements and propose solutions, risks, and impact assessments.
Data Analysis & Reporting
  • Aggregate and analyze enterprise data for periodic and ad hoc reporting.
  • Independently extract and interpret KRIs and KPIs.
  • Develop monthly and quarterly third-party metrics dashboards.
  • Maintain the Vulnerability Incident Management tracker.
  • Synthesize complex data into clear, executive-ready insights.
  • Document and track vulnerability incidents and control evidence.
Stakeholder & Project Coordination
  • Establish and maintain strong relationships with enterprise stakeholders.
  • Facilitate meetings, forums, and follow-ups to drive project goals.
  • Support leadership using OneTrust workflows and processes.
  • Monitor and document third-party risk and cybersecurity trends.
Documentation & Communications
  • Create professional communications including:
    • Procedures and guidance
    • Job aids
    • PowerPoint presentations
    • Questionnaire templates
    • Dashboards and reports
  • Produce incident summaries and executive-level write-ups.
Required Qualifications
  • Bachelor’s degree in Risk Management, Business Administration, Finance, Data Analytics, Project Management, Information Security, or related field.
  • 5+ years of experience in risk management or third-party risk management (financial services preferred).
  • Strong hands-on data analysis experience.
  • Advanced proficiency in Microsoft Office Suite:
    • Excel (required)
    • Word
    • PowerPoint
    • Power BI
  • Experience aggregating and interpreting enterprise data.
  • Excellent professional writing and communication skills.
  • Strong multitasking and time-management abilities.
  • Experience in third-party risk assessment, remediation, and monitoring.
  • Knowledge of cybersecurity or information security incident management.
  • Familiarity with third-party risk frameworks and methodologies.
  • Ability to work onsite Monday–Friday in McLean, VA.
Preferred Qualifications
  • Experience with OneTrust platform.
  • Background in financial services risk environments.
  • Exposure to enterprise vulnerability management programs.
Key Skills
  • Enterprise Risk Management
  • Third-Party Risk Management (TPRM)
  • Data Analysis & Aggregation
  • KPI/KRI Development
  • Executive Reporting
  • Microsoft Excel (Advanced)
  • Power BI
  • Stakeholder Management
  • Incident Management
  • Strong Written Communication