1

Grc Third Party Risk Analyst Jobs in Alabama (NOW HIRING)

... Third-Party Risk Management workstreams in partnership with architects and product owners ... Experience with Performance Analytics, Predictive Intelligence, Now Assist, or generative ...

Governance, Risk, and Compliance (GRC) Reports To: GRC Manager Employment Type: Full-Time Exempt ... Mentor GRC Analysts and GRC Consultants while contributing to the continuous improvement of MAD ...

Senior GRC Consultant

Huntsville, AL · On-site

$120 - $180/hr

Governance, Risk, and Compliance (GRC) Reports To: GRC Manager Employment Type: Full-Time Exempt ... Mentor GRC Analysts and GRC Consultants while contributing to the continuous improvement of MAD ...

Working knowledge of secure systems engineering and software assurance, including static analysis, secure configuration, FOSS/third-party risk, SBOM concepts, and OWASP/DISA application-security ...

Working knowledge of secure systems engineering and software assurance, including static analysis, secure configuration, FOSS/third-party risk, SBOM concepts, and OWASP/DISA application-security ...

Working knowledge of secure systems engineering and software assurance, including static analysis, secure configuration, FOSS/third-party risk, SBOM concepts, and OWASP/DISA application-security ...

Cybersecurity Lead

Huntsville, AL · On-site

$106 - $148/hr

Working knowledge of secure systems engineering and software assurance, including static analysis, secure configuration, FOSS/third-party risk, SBOM concepts, and OWASP/DISA application-security ...

... Third-Party Technology Risk Develops methodologies, models, and frameworks to quantify technology ... Performs risk analysis to assess technology risks, identify trends, and support risk-informed ...

... risk registers Prepare documentation and participate in quarterly ISMS and GRC reporting cycles Operates under the direction of the GRC Manager with a focus on execution and coordination, not ...

Independently performs ad hoc analysis of often complex credit risk issues, frequently requiring ... Twelve (12) years of credit-related experience, or eight (8) years of third line of defense credit ...

Showing results 41-60

Grc Third Party Risk Analyst information

What is a GRC Third Party Risk Analyst?

A GRC Third Party Risk Analyst is a professional who assesses and manages the risks associated with an organization’s external vendors, suppliers, or partners. Their role involves evaluating third-party compliance with regulatory standards and internal policies, identifying potential risks such as data breaches or non-compliance, and recommending mitigation strategies. They use frameworks like GRC (Governance, Risk, and Compliance) to help ensure that third-party relationships do not compromise the organization's security or reputation. This role often collaborates with procurement, legal, and IT teams to maintain robust risk management processes.

What are some typical challenges a GRC Third Party Risk Analyst may encounter when assessing vendors?

As a GRC Third Party Risk Analyst, you may face challenges such as obtaining timely and complete responses from vendors, especially when dealing with large or international organizations. Navigating varying levels of vendor maturity in risk management practices can also be difficult. Additionally, balancing the need for thorough risk assessments with fast-paced business timelines requires strong communication and prioritization skills. Collaborating closely with procurement, legal, and IT teams is essential to ensure all risks are properly identified and managed.

What are the key skills and qualifications needed to thrive as a GRC Third Party Risk Analyst, and why are they important?

To thrive as a GRC Third Party Risk Analyst, you need a strong understanding of risk management frameworks, compliance regulations, and vendor risk assessment methodologies, typically supported by a degree in information security, business, or a related field. Familiarity with GRC platforms (like Archer or ServiceNow), third-party risk management tools, and certifications such as CISA or CRISC is highly beneficial. Strong analytical thinking, attention to detail, and effective communication skills are essential soft skills for this role. These competencies ensure that organizations can accurately assess and mitigate third-party risks, maintaining compliance and protecting sensitive data.

What is the difference between Grc Third Party Risk Analyst vs Grc Vendor Risk Analyst?

AspectGrc Third Party Risk AnalystGrc Vendor Risk Analyst
CertificationsCertifications like CRISC, CISA often preferredSame certifications commonly required
Work EnvironmentFocuses on third-party relationships and risk assessmentsPrimarily evaluates vendor-specific risks and compliance
Industry UsageUsed across finance, healthcare, and tech sectorsCommonly found in industries with extensive vendor networks

The Grc Third Party Risk Analyst and Grc Vendor Risk Analyst roles overlap significantly in certifications and work environment. The main difference lies in scope: the Third Party Risk Analyst assesses overall third-party relationships, while the Vendor Risk Analyst concentrates specifically on individual vendors. Both roles are vital for managing third-party risks in various industries.

What are popular job titles related to Grc Third Party Risk Analyst jobs in Alabama?

For Grc Third Party Risk Analyst jobs in Alabama, the most frequently searched job titles are:

What job categories do people searching Grc Third Party Risk Analyst jobs in Alabama look for?

The top searched job categories for Grc Third Party Risk Analyst jobs in Alabama are:

What cities in Alabama are hiring for Grc Third Party Risk Analyst jobs?

Cities in Alabama with the most Grc Third Party Risk Analyst job openings:

Infographic showing various Grc Third Party Risk Analyst job openings in Alabama as of August 2026, with employment types broken down into 100% Full Time. Highlights an 84% In-person, 8% Hybrid, and 8% Remote job distribution.

Manager - ServiceNow

Deloitte

Birmingham, AL • On-site, Remote

Full-time

Re-posted 18 days ago


Key responsibilities

  • Lead end-to-end delivery of multi-workstream ServiceNow programs from mobilization through go-live and transition.

  • Manage stakeholder engagement, facilitate decisions, and report on key performance indicators, value realization, and adoption metrics.

  • Oversee cross-functional teams and vendors across onshore and offshore models, aligning resources and mitigating delivery risks.


Deloitte rating

8.2

Company rating: 8.2 out of 10

Based on 93 frontline employees who took The Breakroom Quiz

47th of 154 rated financial services


Job description

Cyber Manager - ServiceNow 

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a Manager - ServiceNow on the Cyber Strategy & Transformation team, you will be responsible for:

  • Leading end-to-end delivery of multi-workstream ServiceNow programs from mobilization through go-live and transition, including scope, schedule, budget, risks, assumptions, issues, dependencies, and quality management
  • Standing up delivery governance and operating rhythms; driving backlog, sprint, and release planning across Integrated Risk Management, Security Operations, Information Technology Operations Management, Information Technology Asset Management, and Third-Party Risk Management workstreams in partnership with architects and product owners
  • Managing stakeholder engagement and executive communications; facilitating decisions, change control, and status reporting with clear key performance indicators, value realization, and adoption metrics
  • Orchestrating cross-functional teams and vendors across onshore and offshore models; aligning resources and mitigating delivery risks, blockers, and interdependencies
  • Overseeing pre-sales through delivery handoff activities, including scoping, estimates, staffing plans, delivery approaches, and transition-to-operations readiness

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with client strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. It includes design of the cyber organization, governance, and risk assessments.

Qualifications

Required

  • Bachelor's degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, or Business Administration
  • 6+ years managing ServiceNow programs or projects in a client-facing consulting or professional services role
  • 5+ years leading multi-workstream ServiceNow deliveries using Agile or hybrid methodologies, including backlog, sprint, and release management
  • 5+ years of experience demonstrated experience architecting solutions across multiple ServiceNow security and risk modules: IT Operations Management (ITOM), IT Asset Management (ITAM), Integrated Risk Management (IRM), Security Operations (SecOps) or Third-Party Risk Management (TPRM).
  • 3+ years managing program financials, executive reporting, stakeholder management, and change control for ServiceNow programs
  • 3+ years managing distributed delivery teams, including onshore and offshore resources, vendors, and client personnel, and 2+ full lifecycle ServiceNow implementations delivered from initiation through go-live and transition to operations
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • ServiceNow Certified Master Architect
  • ServiceNow Certified Technical Architect
  • Experience with ServiceNow Business Continuity Management or Privacy Management modules
  • Experience with RSA Archer or other governance, risk, and compliance platforms, including migration or coexistence with ServiceNow
  • Experience with Performance Analytics, Predictive Intelligence, Now Assist, or generative artificial intelligence capabilities
  • Experience applying one or more of the following in platform design: National Institute of Standards and Technology Cybersecurity Framework, International Organization for Standardization 27001, Sarbanes-Oxley, General Data Protection Regulation, or Health Insurance Portability and Accountability Act
  • Master's degree in Computer Science, Cyber Security, Information Security, Engineering, or Information Technology
#CyberServiceNow

For individuals assigned and/or hired to work in Remote role, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to Remote role and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Qualifications:

Cyber Manager - ServiceNow 

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a Manager - ServiceNow on the Cyber Strategy & Transformation team, you will be responsible for:

  • Leading end-to-end delivery of multi-workstream ServiceNow programs from mobilization through go-live and transition, including scope, schedule, budget, risks, assumptions, issues, dependencies, and quality management
  • Standing up delivery governance and operating rhythms; driving backlog, sprint, and release planning across Integrated Risk Management, Security Operations, Information Technology Operations Management, Information Technology Asset Management, and Third-Party Risk Management workstreams in partnership with architects and product owners
  • Managing stakeholder engagement and executive communications; facilitating decisions, change control, and status reporting with clear key performance indicators, value realization, and adoption metrics
  • Orchestrating cross-functional teams and vendors across onshore and offshore models; aligning resources and mitigating delivery risks, blockers, and interdependencies
  • Overseeing pre-sales through delivery handoff activities, including scoping, estimates, staffing plans, delivery approaches, and transition-to-operations readiness

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with client strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. It includes design of the cyber organization, governance, and risk assessments.

Qualifications

Required

  • Bachelor's degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, or Business Administration
  • 6+ years managing ServiceNow programs or projects in a client-facing consulting or professional services role
  • 5+ years leading multi-workstream ServiceNow deliveries using Agile or hybrid methodologies, including backlog, sprint, and release management
  • 5+ years of experience demonstrated experience architecting solutions across multiple ServiceNow security and risk modules: IT Operations Management (ITOM), IT Asset Management (ITAM), Integrated Risk Management (IRM), Security Operations (SecOps) or Third-Party Risk Management (TPRM).
  • 3+ years managing program financials, executive reporting, stakeholder management, and change control for ServiceNow programs
  • 3+ years managing distributed delivery teams, including onshore and offshore resources, vendors, and client personnel, and 2+ full lifecycle ServiceNow implementations delivered from initiation through go-live and transition to operations
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • ServiceNow Certified Master Architect
  • ServiceNow Certified Technical Architect
  • Experience with ServiceNow Business Continuity Management or Privacy Management modules
  • Experience with RSA Archer or other governance, risk, and compliance platforms, including migration or coexistence with ServiceNow
  • Experience with Performance Analytics, Predictive Intelligence, Now Assist, or generative artificial intelligence capabilities
  • Experience applying one or more of the following in platform design: National Institute of Standards and Technology Cybersecurity Framework, International Organization for Standardization 27001, Sarbanes-Oxley, General Data Protection Regulation, or Health Insurance Portability and Accountability Act
  • Master's degree in Computer Science, Cyber Security, Information Security, Engineering, or Information Technology
#CyberServiceNow

For individuals assigned and/or hired to work in Remote role, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to Remote role and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom