ZipRecruiter

Log In

1

Grc Third Party Risk Analyst Jobs in Edison, NJ (NOW HIRING)

Crowe LLP

Third Party Risk Manager

New York, NY · On-site

... analysis, identity management, access management, cloud security, or web security * Working ... Experience with Archer, ProcessUnity, ServiceNow, OneTrust, or other GRC/VRM platforms * Experience ...

Crowe LLP

Third Party Risk Manager

New York, NY · On-site

... analysis, identity management, access management, cloud security, or web security * Working ... Experience with Archer, ProcessUnity, ServiceNow, OneTrust, or other GRC/VRM platforms * Experience ...

next page

Showing results 1-20

All JobsGrc Third Party Risk Analyst JobsGrc Third Party Risk Analyst Jobs in Edison, NJ

Grc Third Party Risk Analyst information

See Edison, NJ salary details

$46.1K

$89.7K

$128.9K

How much do grc third party risk analyst jobs pay per year?

As of Aug 19, 2026, the average yearly pay for grc third party risk analyst in Edison, NJ is $89,744.00, according to ZipRecruiter salary data. Most workers in this role earn between $58,500.00 and $103,500.00 per year, depending on experience, location, and employer.

What is a GRC Third Party Risk Analyst?

A GRC Third Party Risk Analyst is a professional who assesses and manages the risks associated with an organization’s external vendors, suppliers, or partners. Their role involves evaluating third-party compliance with regulatory standards and internal policies, identifying potential risks such as data breaches or non-compliance, and recommending mitigation strategies. They use frameworks like GRC (Governance, Risk, and Compliance) to help ensure that third-party relationships do not compromise the organization's security or reputation. This role often collaborates with procurement, legal, and IT teams to maintain robust risk management processes.

What are some typical challenges a GRC Third Party Risk Analyst may encounter when assessing vendors?

As a GRC Third Party Risk Analyst, you may face challenges such as obtaining timely and complete responses from vendors, especially when dealing with large or international organizations. Navigating varying levels of vendor maturity in risk management practices can also be difficult. Additionally, balancing the need for thorough risk assessments with fast-paced business timelines requires strong communication and prioritization skills. Collaborating closely with procurement, legal, and IT teams is essential to ensure all risks are properly identified and managed.

What are the key skills and qualifications needed to thrive as a GRC Third Party Risk Analyst, and why are they important?

To thrive as a GRC Third Party Risk Analyst, you need a strong understanding of risk management frameworks, compliance regulations, and vendor risk assessment methodologies, typically supported by a degree in information security, business, or a related field. Familiarity with GRC platforms (like Archer or ServiceNow), third-party risk management tools, and certifications such as CISA or CRISC is highly beneficial. Strong analytical thinking, attention to detail, and effective communication skills are essential soft skills for this role. These competencies ensure that organizations can accurately assess and mitigate third-party risks, maintaining compliance and protecting sensitive data.

What is the difference between Grc Third Party Risk Analyst vs Grc Vendor Risk Analyst?

AspectGrc Third Party Risk AnalystGrc Vendor Risk Analyst
CertificationsCertifications like CRISC, CISA often preferredSame certifications commonly required
Work EnvironmentFocuses on third-party relationships and risk assessmentsPrimarily evaluates vendor-specific risks and compliance
Industry UsageUsed across finance, healthcare, and tech sectorsCommonly found in industries with extensive vendor networks

The Grc Third Party Risk Analyst and Grc Vendor Risk Analyst roles overlap significantly in certifications and work environment. The main difference lies in scope: the Third Party Risk Analyst assesses overall third-party relationships, while the Vendor Risk Analyst concentrates specifically on individual vendors. Both roles are vital for managing third-party risks in various industries.

What are popular job titles related to Grc Third Party Risk Analyst jobs in Edison, NJ?

For Grc Third Party Risk Analyst jobs in Edison, NJ, the most frequently searched job titles are:

What job categories do people searching Grc Third Party Risk Analyst jobs in Edison, NJ look for?

The top searched job categories for Grc Third Party Risk Analyst jobs in Edison, NJ are:

What cities near Edison, NJ are hiring for Grc Third Party Risk Analyst jobs?

Cities near Edison, NJ with the most Grc Third Party Risk Analyst job openings:

Grc Third Party Risk Analyst jobs near you

Vulnerability Management Specialist- GRC (Hybrid)

Selective Insurance Company of America

Short Hills, NJ • On-site

Full-time

Medical, Retirement, PTO

Posted 12 days ago

Selective Insurance rating

8.7

Company rating: 8.7 out of 10

Based on 5 frontline employees who took The Breakroom Quiz

71st of 310 rated insurance

Job description

About Us
At Selective, we don't just insure uniquely, we employ uniqueness.
Selective is a midsized U.S. domestic property and casualty insurance company with a history of strong, consistent financial performance for nearly 100 years. Selective's unique position as both a leading insurance group and an employer of choice is recognized in a wide variety of awards and honors, including listing in Forbes Best Midsize Employers in 2025 and certification as a Great Place to Work® in 2025 for the sixth consecutive year.
Employees are empowered and encouraged to Be Uniquely You by being their true, unique selves and contributing their diverse talents, experiences, and perspectives to our shared success. Together, we are a high-performing team working to serve our customers responsibly by helping to mitigate loss, keep them safe, and restore their lives and businesses after an insured loss occurs.
Overview
The GRC, Third-Party Risk, Vulnerability Management Analyst performs established governance, risk, compliance, vendor risk, and vulnerability management activities with increasing independence. This role is designed for a developing risk professional who can execute risk assessments, analyze control evidence, support regulatory and audit requirements, coordinate remediation tracking, and produce clear reporting for stakeholders. The role applies working knowledge of cybersecurity controls, risk frameworks, third-party due diligence, vulnerability governance, and issue management to support consistent, defensible risk decisions.
Responsibilities
GRC Program Execution
  • Execute assigned GRC activities, including risk documentation, control mapping, exception tracking, and assessment record maintenance.
  • Support policy, standard, and procedure lifecycle activities by coordinating updates, collecting input, and validating evidence of approvals.
  • Prepare materials for governance forums, risk reviews, audit discussions, and compliance reporting using established templates and data sources.

Third-Party Risk Management
  • Coordinate vendor assessment intake, due diligence requests, follow-ups, and stakeholder communications through closure.
  • Review vendor questionnaires, SOC reports, ISO certifications, penetration test summaries, vulnerability information, business continuity documentation, and other due diligence artifacts for completeness and risk relevance.
  • Document assessment conclusions, remediation items, missing evidence, and residual risk considerations in alignment with defined TPRM procedures.

Vulnerability Management Governance
  • Support vulnerability governance activities by tracking remediation status, exception requests, risk acceptance documentation, and aging issues.
  • Partner with technology and risk stakeholders to validate ownership, required evidence, and remediation progress for identified vulnerabilities or control gaps.
  • Contribute to recurring metrics and reporting related to vulnerability trends, overdue remediation, exception volume, and issue closure.

Audit and Compliance Support
  • Collect, organize, and validate audit evidence in accordance with defined control objectives and regulatory expectations.
  • Assist with remediation tracking for audit findings, control gaps, risk acceptances, and compliance action items.
  • Maintain documentation aligned to frameworks and requirements such as NIST CSF, NIST 800-53, NYDFS, GLBA, SOX, SOC reporting, and ISO 27001.

Metrics and Continuous Improvement
  • Maintain and enhance routine metrics for risk assessment volume, vendor status, vulnerability remediation, open issues, and documentation completeness.
  • Identify opportunities to improve templates, procedures, evidence requests, stakeholder instructions, and process consistency.
  • Support process improvement efforts by documenting pain points, recommending practical updates, and helping implement approved changes.

Qualifications
Required
  • Working understanding of cybersecurity, risk management, compliance, vulnerability management, audit, or third-party risk concepts.
  • Ability to evaluate common security evidence, identify incomplete or inconsistent information, and escalate potential risk concerns.
  • Strong attention to detail, documentation discipline, and ability to manage multiple assessment or remediation activities concurrently.
  • Clear written and verbal communication skills, including the ability to summarize technical or control information for business stakeholders.
  • Proficiency with Microsoft Office; experience with GRC, vendor risk, vulnerability management, ticketing, or reporting tools is preferred.

Preferred
  • 3-5 years of experience in GRC, cybersecurity, third-party risk, vulnerability management, audit, compliance, procurement risk, or vendor management.
  • Experience contributing to audits, regulatory compliance activities, control testing, risk assessments, or vendor due diligence reviews.
  • Familiarity with frameworks and regulations such as NIST CSF, NIST 800-53, NYDFS, GLBA, SOX, SOC reporting, ISO 27001, or related standards.
  • Relevant certification or progress toward a certification such as CRISC, CISA, Security+, CDPSE, CTPRP, or similar is a plus.

Total Rewards
Selective Insurance offers a total rewards package that includes a competitive base salary, incentive plan eligibility at all levels, and a wide array of benefits designed to help you and your family stay healthy, achieve your financial goals, and balance the demands of your work and personal life. These benefits include comprehensive health care plans, retirement savings plan with company match, discounted Employee Stock Purchase Program, tuition assistance and reimbursement programs, and 20 days of paid time off. Additional details about our total rewards package can be found by visiting our benefits page.
The actual base salary is based on geographic location, and the range is representative of salaries for this role throughout Selective's footprint. Additional considerations include relevant education, qualifications, experience, skills, performance, and business needs.
Pay Range
USD $116,000.00 - USD $157,000.00 /Yr.
Additional Information
Selective is an Equal Employment Opportunity employer. That means we respect and value every individual's unique opinions, beliefs, abilities, and perspectives. We are committed to promoting a welcoming culture that celebrates diverse talent, individual identity, different points of view and experiences - and empowers employees to contribute new ideas that support our continued and growing success. Building a highly engaged team is one of our core strategic imperatives, which we believe is enhanced by diversity, equity, and inclusion. We expect and encourage all employees and all of our business partners to embrace, practice, and monitor the attitudes, values, and goals of acceptance; address biases; and foster diversity of viewpoints and opinions.
For Massachusetts Applicants
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

What Selective Insurance employees say

Pay

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply