ZipRecruiter

Log In

1

Grc Third Party Risk Analyst Jobs in Georgia (NOW HIRING)

Visa

Risk Management Analyst

Atlanta, GA · On-site

The Third-Party Lifecycle Management Program (TLMP) team is a second line of defense Third Party ... Working experience with GRC tools and system maintenance and improvement. * Strong attention to ...

Visa

Risk Management Analyst

Atlanta, GA · On-site

$89K/yr

The Third-Party Lifecycle Management Program (TLMP) team is a second line of defense Third Party ... Working experience with GRC tools and system maintenance and improvement. * Strong attention to ...

Visa

Risk Management Analyst

Atlanta, GA

$89K/yr

The Third-Party Lifecycle Management Program (TLMP) team is a second line of defense Third Party ... Working experience with GRC tools and system maintenance and improvement. * Strong attention to ...

Merci Technologies - Talent

GRC Analyst

Atlanta, GA · Remote

About the Role Merci Technologies is seeking a GRC Analyst to support the governance, risk, and ... Perform vendor and third-party risk assessments and document risk acceptance decisions * Build and ...

PrizePicks

Senior GRC Analyst

Atlanta, GA · On-site +1

PrizePicks is seeking an experienced and detail-oriented Senior GRC Analyst to join our expanding ... Third-Party Risk Management (TPRM): * Lead security risk assessments for new and renewing third ...

PrizePicks

Senior GRC Analyst

Atlanta, GA

PrizePicks is seeking an experienced and detail-oriented Senior GRC Analyst to join our expanding ... Third-Party Risk Management (TPRM): * Lead security risk assessments for new and renewing third ...

Transact Campus

Business Risk Analyst

Alpharetta, GA · Remote

$70K - $98K/yr

... GRC workflow, and risk management initiatives. This role will play a key part in maintaining ... third-party auditors and internal assessments * Maintain organized documentation for audit ...

Transact Campus Inc

Business Risk Analyst

Alpharetta, GA · On-site +1

$70K - $98K/yr

... GRC workflow, and risk management initiatives. This role will play a key part in maintaining ... third-party auditors and internal assessments * Maintain organized documentation for audit ...

next page

Showing results 1-20

All JobsGrc Third Party Risk Analyst JobsGrc Third Party Risk Analyst Jobs in Georgia

Grc Third Party Risk Analyst information

What are some typical challenges a GRC Third Party Risk Analyst may encounter when assessing vendors?

As a GRC Third Party Risk Analyst, you may face challenges such as obtaining timely and complete responses from vendors, especially when dealing with large or international organizations. Navigating varying levels of vendor maturity in risk management practices can also be difficult. Additionally, balancing the need for thorough risk assessments with fast-paced business timelines requires strong communication and prioritization skills. Collaborating closely with procurement, legal, and IT teams is essential to ensure all risks are properly identified and managed.

What are the key skills and qualifications needed to thrive as a GRC Third Party Risk Analyst, and why are they important?

To thrive as a GRC Third Party Risk Analyst, you need a strong understanding of risk management frameworks, compliance regulations, and vendor risk assessment methodologies, typically supported by a degree in information security, business, or a related field. Familiarity with GRC platforms (like Archer or ServiceNow), third-party risk management tools, and certifications such as CISA or CRISC is highly beneficial. Strong analytical thinking, attention to detail, and effective communication skills are essential soft skills for this role. These competencies ensure that organizations can accurately assess and mitigate third-party risks, maintaining compliance and protecting sensitive data.

What is a GRC Third Party Risk Analyst?

A GRC Third Party Risk Analyst is a professional who assesses and manages the risks associated with an organization’s external vendors, suppliers, or partners. Their role involves evaluating third-party compliance with regulatory standards and internal policies, identifying potential risks such as data breaches or non-compliance, and recommending mitigation strategies. They use frameworks like GRC (Governance, Risk, and Compliance) to help ensure that third-party relationships do not compromise the organization's security or reputation. This role often collaborates with procurement, legal, and IT teams to maintain robust risk management processes.

What is the difference between Grc Third Party Risk Analyst vs Grc Vendor Risk Analyst?

AspectGrc Third Party Risk AnalystGrc Vendor Risk Analyst
CertificationsCertifications like CRISC, CISA often preferredSame certifications commonly required
Work EnvironmentFocuses on third-party relationships and risk assessmentsPrimarily evaluates vendor-specific risks and compliance
Industry UsageUsed across finance, healthcare, and tech sectorsCommonly found in industries with extensive vendor networks

The Grc Third Party Risk Analyst and Grc Vendor Risk Analyst roles overlap significantly in certifications and work environment. The main difference lies in scope: the Third Party Risk Analyst assesses overall third-party relationships, while the Vendor Risk Analyst concentrates specifically on individual vendors. Both roles are vital for managing third-party risks in various industries.

What are popular job titles related to Grc Third Party Risk Analyst jobs in Georgia? For Grc Third Party Risk Analyst jobs in Georgia, the most frequently searched job titles are:
What job categories do people searching Grc Third Party Risk Analyst jobs in Georgia look for? The top searched job categories for Grc Third Party Risk Analyst jobs in Georgia are:
What cities in Georgia are hiring for Grc Third Party Risk Analyst jobs? Cities in Georgia with the most Grc Third Party Risk Analyst job openings:
Grc Third Party Risk Analyst jobs near you
Infographic showing various Grc Third Party Risk Analyst job openings in Georgia as of August 2026, with employment types broken down into 1% As Needed, 91% Full Time, 6% Part Time, and 2% Contract. Highlights an 88% Physical, 4% Hybrid, and 8% Remote job distribution.

Senior Security Third Party Risk (TPRM) Analyst

OneTrust

Atlanta, GA • On-site

Other

Re-posted 11 hours ago

Job description

The Challenge

We are looking for a dynamic Senior Information Security GRC Analyst to support IT and InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team.

Your Mission

This role will support InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team.  In addition, this role will collaborate with architecture, legal, compliance, and privacy as part of our TPRM (Third Party Risk Management) process.  This role will help review risk assessments for customers/vendors, data flow diagrams, architecture diagrams, certifications, questionnaires, etc.   

You Are

This a team player who can work well within the GRC team. 

  • Collaborate with IT, InfoSec, and within the GRC team to mature the compliance process
  • Review vendor due diligence documentation, including SOC reports, ISO certifications, penetration testing reports, policies, and security questionnaires.
  • Evaluate supplier control environments against established risk management standards and frameworks.
  • Document risk findings and communicate recommendations to business stakeholders.
  • Execute risk assessments of third-party vendors
  • Mentor Junior Security Analysts, and work with them to evaluate and remediate complex security incidents 
  • Responsible for generation and continued delivery of relevant KPIs and metrics 
  • Provide feedback on solutions and processes to mature overall capabilities 
  • Impart expertise on the OneTrust environment and security best practices to others on the team
  • BA/BS in Computer Science, Cybersecurity, Information assurance or related subject 
You Experience Includes
  • 5+ years, hands on experience in cybersecurity/risk management  
  • Experience reviewing SOC 1, SOC 2 reports & ISO 27001 certifications
  • Experience reviewing security questionnaires, business continuity and disaster recovery plans as well as vendor contracts and security requirements
  • Understanding of information security best practices around confidentiality, integrity and availability 
  • Cloud experience in at least one cloud provider 
  • Understanding of applicable laws and regulations, including but not limited to, GDPR, CCPA, PCI-DSS, SOC 2, ISO, and FedRAMP
  • Understanding of the standards for the processing practice of third-party management
  • Understanding of technology domains including governance, risk management, security, privacy, and information technology and business continuity
Preferred Experience
  • Certifications: CRISC, Security+, CISSP, CISM, CCSP, CISA, Azure
  • Knowledge of OneTrust security/GRC products. 

Apply