About the Role Most third-party risk roles hand you a mature program and ask you to keep the queue moving. This is the opposite. You'll be the first security risk analyst at OpenRouter, building the ...
About the Role Most third-party risk roles hand you a mature program and ask you to keep the queue moving. This is the opposite. You'll be the first security risk analyst at OpenRouter, building the ...
Third Party Risk Analyst
Tampa, FL · Remote
$60K - $90K/yr
Medical
Dental
Vision
Retirement
PTO
Remote (Candidate must reside in the state of FL) Position Type: Full Time The Third-Party Risk Analyst supports the Third-Party Risk Management (TPRM) program by executing risk assessments ...
Third Party Risk Analyst
Tampa, FL · Remote
$60K - $90K/yr
Medical
Dental
Vision
Retirement
PTO
Remote (Candidate must reside in the state of FL) Position Type: Full Time The Third-Party Risk Analyst supports the Third-Party Risk Management (TPRM) program by executing risk assessments ...
Third Party Risk Analyst
Tampa, FL · On-site
$60K - $90K/yr
Medical
Dental
Vision
Retirement
PTO
Remote (Candidate must reside in the state of FL) Position Type: Full Time The Third-Party Risk Analyst supports the Third-Party Risk Management (TPRM) program by executing risk assessments ...
Third Party Risk Analyst
Tampa, FL · On-site
$60K - $90K/yr
Medical
Dental
Vision
Retirement
PTO
Remote (Candidate must reside in the state of FL) Position Type: Full Time The Third-Party Risk Analyst supports the Third-Party Risk Management (TPRM) program by executing risk assessments ...
Third Party Risk Analyst
Tampa, FL · On-site +1
$60K - $90K/yr
Medical
Dental
Vision
Retirement
PTO
Remote (Candidate must reside in the state of FL) Position Type: Full Time The Third-Party Risk Analyst supports the Third-Party Risk Management (TPRM) program by executing risk assessments ...
Third Party Risk Analyst
Tampa, FL · On-site +1
$60K - $90K/yr
Medical
Dental
Vision
Retirement
PTO
Remote (Candidate must reside in the state of FL) Position Type: Full Time The Third-Party Risk Analyst supports the Third-Party Risk Management (TPRM) program by executing risk assessments ...
Third Party Risk Analyst, Sr
Evansville, IN · On-site
Medical
Dental
Vision
Retirement
The Third-Party Risk Management (TPRM) Senior Analyst is responsible for executing thirdparty risk management activities across a portfolio of vendors, supporting the Bank's compliance with ...
Third Party Risk Analyst, Sr
Evansville, IN · On-site
Medical
Dental
Vision
Retirement
The Third-Party Risk Management (TPRM) Senior Analyst is responsible for executing thirdparty risk management activities across a portfolio of vendors, supporting the Bank's compliance with ...
GRC Analyst - Third Party Risk
Boston, MA · On-site
$70K - $110K/yr
As a GRC Analyst, you will support the WHOOP Governance, Risk, and Compliance program. You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security ...
GRC Analyst - Third Party Risk
Boston, MA · On-site
$70K - $110K/yr
As a GRC Analyst, you will support the WHOOP Governance, Risk, and Compliance program. You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security ...
$80K/yr
By balance sheet size - The Banker, Juillet 2025 Reference 2026-114347 Update date 17/07/2026 Business type Types of Jobs - Risk Management / Control Job title US Analyst - Third Party Risk ...
$80K/yr
By balance sheet size - The Banker, Juillet 2025 Reference 2026-114347 Update date 17/07/2026 Business type Types of Jobs - Risk Management / Control Job title US Analyst - Third Party Risk ...
Risk Analyst
Retirement
PTO
This role will support the third-party risk management lifecycle by gathering, analyzing, and monitoring operational metrics, key risk indicators (KRIs), and internal risk data as part of our third ...
Risk Analyst
Retirement
PTO
This role will support the third-party risk management lifecycle by gathering, analyzing, and monitoring operational metrics, key risk indicators (KRIs), and internal risk data as part of our third ...
Risk Analyst
Retirement
PTO
This role will support the third-party risk management lifecycle by gathering, analyzing, and monitoring operational metrics, key risk indicators (KRIs), and internal risk data as part of our third ...
Risk Analyst
Retirement
PTO
This role will support the third-party risk management lifecycle by gathering, analyzing, and monitoring operational metrics, key risk indicators (KRIs), and internal risk data as part of our third ...
Third Party Risk Senior Consultant
Chicago, IL · On-site
$78 - $154/hr
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or web Working knowledge of at least one ...
Third Party Risk Senior Consultant
Chicago, IL · On-site
$78 - $154/hr
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or web Working knowledge of at least one ...
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or web * Working knowledge of at least one ...
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or web * Working knowledge of at least one ...
Third Party Risk Senior Consultant
Indianapolis, IN · On-site
$78 - $154/hr
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or webWorking knowledge of at least one ...
Third Party Risk Senior Consultant
Indianapolis, IN · On-site
$78 - $154/hr
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or webWorking knowledge of at least one ...
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or web * Working knowledge of at least one ...
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or web * Working knowledge of at least one ...
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or web * Working knowledge of at least one ...
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or web * Working knowledge of at least one ...
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or web * Working knowledge of at least one ...
Conducting Third Party Risk Assessments by evaluating third party questionnaire responses ... analysis, identity management, access management, or web * Working knowledge of at least one ...
Third Party Risk Intern
Chicago, IL · On-site
$15.50 - $20.50/hr
As a Third-Party Risk team member in Crowe's Consulting Practice , your role will be focused on ... You will consult with clients to analyze their third-party cybersecurity programs, implement ...
New
Third Party Risk Intern
Chicago, IL · On-site
$15.50 - $20.50/hr
As a Third-Party Risk team member in Crowe's Consulting Practice , your role will be focused on ... You will consult with clients to analyze their third-party cybersecurity programs, implement ...
New
Third Party Risk Intern
$27 - $42/hr
As a Third-Party Risk team member in Crowe's Consulting Practice , your role will be focused on ... You will consult with clients to analyze their third-party cybersecurity programs, implement ...
New
Third Party Risk Intern
$27 - $42/hr
As a Third-Party Risk team member in Crowe's Consulting Practice , your role will be focused on ... You will consult with clients to analyze their third-party cybersecurity programs, implement ...
New
Third Party Risk Intern
Indianapolis, IN · On-site
$13.25 - $17.50/hr
As a Third-Party Risk team member in Crowe's Consulting Practice , your role will be focused on ... You will consult with clients to analyze their third-party cybersecurity programs, implement ...
New
Third Party Risk Intern
Indianapolis, IN · On-site
$13.25 - $17.50/hr
As a Third-Party Risk team member in Crowe's Consulting Practice , your role will be focused on ... You will consult with clients to analyze their third-party cybersecurity programs, implement ...
New
Third Party Risk Intern
Indianapolis, IN · On-site
$27 - $42/hr
As a Third-Party Risk team member in Crowe's Consulting Practice , your role will be focused on ... You will consult with clients to analyze their third-party cybersecurity programs, implement ...
New
Third Party Risk Intern
Indianapolis, IN · On-site
$27 - $42/hr
As a Third-Party Risk team member in Crowe's Consulting Practice , your role will be focused on ... You will consult with clients to analyze their third-party cybersecurity programs, implement ...
New
Third Party Risk Intern
Chicago, IL · On-site
$15.50 - $20.50/hr
As a Third-Party Risk team member in Crowe's Consulting Practice , your role will be focused on ... You will consult with clients to analyze their third-party cybersecurity programs, implement ...
Third Party Risk Intern
Chicago, IL · On-site
$15.50 - $20.50/hr
As a Third-Party Risk team member in Crowe's Consulting Practice , your role will be focused on ... You will consult with clients to analyze their third-party cybersecurity programs, implement ...
Entry Level Third Party Risk Analyst information
See salary details
$15.38 - $19.97
3% of jobs
$19.97 - $24.56
7% of jobs
$24.56 - $29.15
12% of jobs
$30.05 is the 25th percentile. Wages below this are outliers.
$29.15 - $33.74
15% of jobs
$33.74 - $38.33
13% of jobs
The median wage is $38.48 / hr.
$38.33 - $42.92
16% of jobs
$42.92 - $47.51
8% of jobs
$48.08 is the 75th percentile. Wages above this are outliers.
$47.51 - $52.10
11% of jobs
$52.10 - $56.69
6% of jobs
$56.69 - $61.28
6% of jobs
$61.28 - $65.87
3% of jobs
$15
$40
$65
How much do entry level third party risk analyst jobs pay per hour?
As of Aug 18, 2026, the average hourly pay for entry level third party risk analyst in the United States is $40.49, according to ZipRecruiter salary data. Most workers in this role earn between $29.81 and $49.28 per hour, depending on experience, location, and employer.
What is an entry level third party risk analyst?
Entry level third party risk analysts are professionals who help organizations identify, assess, and manage risks associated with working with external vendors or partners. They typically review vendor security practices, ensure compliance with company policies, and assist with risk assessments. This role often involves gathering documentation, analyzing vendor responses, and helping to monitor ongoing third-party relationships to minimize organizational risk.
What are some common challenges entry level third party risk analysts face when assessing new vendors?
Entry Level Third Party Risk Analysts often encounter challenges such as limited access to vendor information, varying risk assessment frameworks across organizations, and the need to quickly learn regulatory requirements. Navigating these issues usually involves collaborating closely with senior analysts, compliance teams, and vendors themselves to gather necessary documentation and clarification. Over time, analysts develop the ability to identify red flags efficiently and adapt to different risk management tools, which helps them grow in their role and take on more complex assessments.
What are the key skills and qualifications needed to thrive as an entry level third party risk analyst, and why are they important?
To thrive as an Entry Level Third Party Risk Analyst, you generally need a bachelor's degree in business, finance, or a related field, along with a foundational understanding of risk management principles. Familiarity with risk assessment tools, vendor management platforms, and basic knowledge of regulatory frameworks such as GDPR or SOC 2 is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you evaluate vendor risks and collaborate with internal stakeholders. These skills and qualities are crucial for accurately identifying, assessing, and mitigating third-party risks that could impact organizational security and compliance.
More about Entry Level Third Party Risk Analyst jobs
What cities are hiring for Entry Level Third Party Risk Analyst jobs?
Cities with the most Entry Level Third Party Risk Analyst job openings:
What are the most commonly searched types of Third Party Risk Analyst jobs?
The most popular types of Third Party Risk Analyst jobs are:
What states have the most Entry Level Third Party Risk Analyst jobs?
States with the most job openings for Entry Level Third Party Risk Analyst jobs include:
What job categories do people searching Entry Level Third Party Risk Analyst jobs look for?
The top searched job categories for Entry Level Third Party Risk Analyst jobs are:
Full-time
Posted 6 days ago
Job description
About OpenRouter
OpenRouter is the AI routing and infrastructure layer that AI builders, AI-native startups, and enterprises use to access, manage, and optimize their AI usage through a unified API, billing interface, and analytics platform. We route billions of tokens every month and sit at the center of how organizations operationalize LLMs across research, product, and production workloads.
We are a small team that punches above its weight. Every person here has direct impact on the product and our users.
About the Role
Most third-party risk roles hand you a mature program and ask you to keep the queue moving. This is the opposite.
You'll be the first security risk analyst at OpenRouter, building the vendor risk function from a blank page. The vendors you assess aren't the usual SaaS sprawl - they're the model providers and subprocessors sitting directly in our customers' data path. And you'll do it in a regulatory environment still being written: there's no playbook for how the EU AI Act applies to an AI routing layer and its supply chain. You'll help write ours.
If you've ever finished a vendor review and thought this should take a third as long and catch twice as much - and wanted to be the one to fix it - keep reading.
What You'll Do
What We're Looking For
Nice to Have
If you don't think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box, and we're looking for someone who is excited to join the team.
OpenRouter is the AI routing and infrastructure layer that AI builders, AI-native startups, and enterprises use to access, manage, and optimize their AI usage through a unified API, billing interface, and analytics platform. We route billions of tokens every month and sit at the center of how organizations operationalize LLMs across research, product, and production workloads.
We are a small team that punches above its weight. Every person here has direct impact on the product and our users.
About the Role
Most third-party risk roles hand you a mature program and ask you to keep the queue moving. This is the opposite.
You'll be the first security risk analyst at OpenRouter, building the vendor risk function from a blank page. The vendors you assess aren't the usual SaaS sprawl - they're the model providers and subprocessors sitting directly in our customers' data path. And you'll do it in a regulatory environment still being written: there's no playbook for how the EU AI Act applies to an AI routing layer and its supply chain. You'll help write ours.
If you've ever finished a vendor review and thought this should take a third as long and catch twice as much - and wanted to be the one to fix it - keep reading.
What You'll Do
- Own end-to-end security assessments for model providers, subprocessors, and SaaS tooling - and get vendors live without becoming the bottleneck.
- Read SOC 2 and ISO reports critically: scope, carve-outs, CUECs, exceptions, and whether the testing supports the opinion. Same for pen tests, DPAs, and subprocessor lists.
- Turn findings into decisions - residual risk and compensating controls, not a spreadsheet of yellow cells.
- Design and stand up the TPRM program: intake, tiering, SLAs, escalation, exceptions, and risk acceptance.
- Pitch and implement tooling that compresses time-to-close, integrated with our GRC stack (Drata) and ticketing.
- Build continuous monitoring for critical vendors and run annual reviews on a real cadence.
- Map vendor risk to our SOC 2, ISO 27001, HIPAA, GDPR, and EU AI Act obligations, including flow-down to subprocessors.
What We're Looking For
- 4+ years in third-party/vendor security risk or security assessment - real assessment reps, not just program administration.
- Working fluency across SOC 2, ISO 27001, HIPAA, and GDPR, plus enough command of the EU AI Act to reason about it rather than recite it.
- Technical literacy - cloud architecture, access models, encryption, data flows - enough to know when a vendor's answer doesn't hold up.
- Comfort with DPAs, BAAs, and security exhibits, and judgment about which clauses actually matter.
- A bias toward shipping. You'll pitch solutions and drive implementation yourself; nobody is going to manage your day.
- Clear writing and a high tolerance for ambiguity. When the precedent doesn't exist, you write the memo.
Nice to Have
- Experience assessing AI/ML vendors or inference infrastructure
- ISO 42001 or NIST AI RMF
- Scripting and automation to eliminate your own toil
- GRC platform administration (Drata, Vanta, or similar)
- Time at an early-stage startup where you built the function rather than joined it
- CISSP, CISA, CRISC, or CTPRP.
If you don't think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box, and we're looking for someone who is excited to join the team.