1

Grc Third Party Risk Analyst Jobs in Vermont (NOW HIRING)

Senior Security Engineer

Burlington, VT · On-site

$112K - $154K/yr

Collaboratewith procurement and legal to assess security risk of third-party vendorsand ... Workwith the GRC function to translate compliance requirements (SOC 2, ISO27001) into engineering ...

Cybersecurity Manager

Burlington, VT · On-site

$111K - $150K/yr

Third-party and vendor risk management * Incident response, cyber resilience, and disaster recovery ... compliance (GRC) and business resiliency. * Serve as an extension of client teams to lead or ...

New

Cyber Security Assessment Manager

Burlington, VT · On-site

$111K - $150K/yr

Third Party Risk Management (TPRM) * Cyber Resilience and Incident Response * Infrastructure risk control frameworks, including second line of defense (2LOD) review * Infrastructure-level Incident ...

New

Data Engineer SOW RFP VT

Waterbury, VT · On-site

$114K - $137K/yr

Experience with ETL processes and data transformation for third party systems * Ability to interpret and work with incomplete or ambiguous legacy data * Strong analytical, communication, and ...

Privacy third-party risk monitoring and assessments * Work with client stakeholders to map data ... Apply critical thinking and analytical problem-solving to complex privacy and data protection ...

New

next page

Showing results 1-20

Grc Third Party Risk Analyst information

What is a GRC Third Party Risk Analyst?

A GRC Third Party Risk Analyst is a professional who assesses and manages the risks associated with an organization’s external vendors, suppliers, or partners. Their role involves evaluating third-party compliance with regulatory standards and internal policies, identifying potential risks such as data breaches or non-compliance, and recommending mitigation strategies. They use frameworks like GRC (Governance, Risk, and Compliance) to help ensure that third-party relationships do not compromise the organization's security or reputation. This role often collaborates with procurement, legal, and IT teams to maintain robust risk management processes.

What are some typical challenges a GRC Third Party Risk Analyst may encounter when assessing vendors?

As a GRC Third Party Risk Analyst, you may face challenges such as obtaining timely and complete responses from vendors, especially when dealing with large or international organizations. Navigating varying levels of vendor maturity in risk management practices can also be difficult. Additionally, balancing the need for thorough risk assessments with fast-paced business timelines requires strong communication and prioritization skills. Collaborating closely with procurement, legal, and IT teams is essential to ensure all risks are properly identified and managed.

What are the key skills and qualifications needed to thrive as a GRC Third Party Risk Analyst, and why are they important?

To thrive as a GRC Third Party Risk Analyst, you need a strong understanding of risk management frameworks, compliance regulations, and vendor risk assessment methodologies, typically supported by a degree in information security, business, or a related field. Familiarity with GRC platforms (like Archer or ServiceNow), third-party risk management tools, and certifications such as CISA or CRISC is highly beneficial. Strong analytical thinking, attention to detail, and effective communication skills are essential soft skills for this role. These competencies ensure that organizations can accurately assess and mitigate third-party risks, maintaining compliance and protecting sensitive data.

What is the difference between Grc Third Party Risk Analyst vs Grc Vendor Risk Analyst?

AspectGrc Third Party Risk AnalystGrc Vendor Risk Analyst
CertificationsCertifications like CRISC, CISA often preferredSame certifications commonly required
Work EnvironmentFocuses on third-party relationships and risk assessmentsPrimarily evaluates vendor-specific risks and compliance
Industry UsageUsed across finance, healthcare, and tech sectorsCommonly found in industries with extensive vendor networks

The Grc Third Party Risk Analyst and Grc Vendor Risk Analyst roles overlap significantly in certifications and work environment. The main difference lies in scope: the Third Party Risk Analyst assesses overall third-party relationships, while the Vendor Risk Analyst concentrates specifically on individual vendors. Both roles are vital for managing third-party risks in various industries.

What job categories do people searching Grc Third Party Risk Analyst jobs in Vermont look for?

The top searched job categories for Grc Third Party Risk Analyst jobs in Vermont are:

What cities in Vermont are hiring for Grc Third Party Risk Analyst jobs?

Cities in Vermont with the most Grc Third Party Risk Analyst job openings:

Infographic showing various Grc Third Party Risk Analyst job openings in Vermont as of July 2026, with employment types broken down into 83% Full Time, 12% Part Time, 1% Temporary, and 4% Contract. Highlights an 82% Physical, 8% Hybrid, and 10% Remote job distribution.

Strategic Sourcing Analyst II (Hybrid)

M&T Bank

Burlington, VT • On-site

Full-time

Posted 25 days ago


M&T Bank rating

7.9

Company rating: 7.9 out of 10

Based on 186 frontline employees who took The Breakroom Quiz

79th of 171 rated banks


Job description

Overview:

Works with business and support units to understand needs, formulate strategies, and source suitable suppliers at the best price to meet requirements. Carries out the Strategic Sourcing process designed to maximize competition and leverage when selecting and contracting with chosen suppliers. Negotiates contracts generally between $500K and $5M in value.

Work Model & Office Locations:

This role follows a hybrid work model, requiring onsite presence four days per week at one of M&T Bank's regional offices.

Primary Responsibilities:
  • For major sourcing initiatives, work with management to identify an Executive Sponsor and a cross-functional project team to ensure appropriate buy-in, support and participation throughout the project.
  • Guide the Project Team through the Strategic Sourcing process and keep the Executive Sponsor and relevant senior managers informed of progress, setbacks and obstacles. Lead a kick-off meeting with the Project Team to clarify the objectives, strategy and proposed timeline of the sourcing initiative. Develop and execute Requests for Proposals (RFPs), Requests for Quotes (RFQs) and/or Requests for Information (RFIs) based on identified business needs, market conditions and corporate standards. Facilitate analysis, evaluation and scoring of vendor proposals against criteria established and agreed on by the Team. Conduct multiple rounds of bids and coordinate activities such as supplier demonstrations, reference calls and on-site visits to short-list suppliers. Lead contract negotiations in conjunction with the Project Team and Legal to ensure we obtain the most competitive pricing and favorable terms possible.
  • Prepare sufficient documentation to inform Executive Sponsor and senior managers of recommendations and results of the sourcing initiative, including any achieved savings, customer implications and impacts to business operations.
  • Guide business and support units through the Third-Party Risk Management Program in conjunction with the Third-Party Risk Management team to ensure selected vendors are properly risk-tiered, vetted and approved before executing a contract.
  • Research and analyze procurement trend data at the Bank and recommend savings opportunities to associated business lines and support functions.
  • Understand and adhere to the Company's risk and regulatory standards, policies and controls in accordance with the Company's Risk Appetite. Identify risk-related issues needing escalation to management.
  • Promote an environment that supports belonging and reflects the M&T Bank brand.
  • Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
  • Complete other related duties as assigned.
Scope of Responsibilities:

Strategic Sourcing is a structured process that maximizes competition and leverage to select the most suitable suppliers at the best price. As such, this position is critical to expense control at the Bank. The position is responsible for one or more categories of spending that occur at the Bank and has overall responsibility for controlling expenses in the assigned category across the entire organization, inclusive of all subsidiaries, business units and cost centers. Typically, categories assigned to the position have between $500K - $5M in annual spending. Consequently, a small percentage impact in these categories can have substantial impact on bottom line profitability of the Bank, stock price and shareholder return.

Education and Experience Required:
  • Bachelor's degree and a minimum of 2 years' proven financial and/or business experience, or in lieu of a degree, a combined minimum of 6 years' higher education and/or work experience, including a minimum of 2 years' proven financial and/or business experience
  • Proficiency with personal computers as well as pertinent mainframe systems and software packages, including those specific to procurement, as well as spreadsheet, presentation and database software
  • Strong time management skills
  • Detail-oriented with strong organizational and analytical skills
  • Strong verbal and written communication skills
  • Experience interacting with all levels of management
  • Strong presentation skillsExperience writing Requests for Proposal (RFPs) and negotiating contracts
  • Experience with Contract Lifecycle Management and eSignature software tools
Education and Experience Preferred:
  • Bachelor's degree and a minimum of 4 years proven financial and/or business experience

#LI-RS1

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $62,200.00 - $103,600.00 Annual (USD). The successful candidate's particular combination of knowledge, skills, and experience will inform their specific compensation.LocationBuffalo, New York, United States of America

What M&T Bank employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom