... Third-Party Risk Management, and ServiceNow AI Control Tower use cases * Supporting functional ... Analyzing processes, controls, and tools to identify opportunities for ServiceNow configuration and ...
... Third-Party Risk Management, and ServiceNow AI Control Tower use cases * Supporting functional ... Analyzing processes, controls, and tools to identify opportunities for ServiceNow configuration and ...
... Security Operations, Third-Party Risk Management, and ServiceNow AI Control Tower use cases ... Analyzing processes, controls, and tools to identify opportunities for ServiceNow configuration and ...
... Security Operations, Third-Party Risk Management, and ServiceNow AI Control Tower use cases ... Analyzing processes, controls, and tools to identify opportunities for ServiceNow configuration and ...
Experience leveraging AI, predictive analytics, or automation in vendor management * Familiarity with third-party risk management frameworks (TPRM) * Experience with IT financial management ...
Experience leveraging AI, predictive analytics, or automation in vendor management * Familiarity with third-party risk management frameworks (TPRM) * Experience with IT financial management ...
Job Summary Leads and governs the CITGO Third Party Risk Management (TPRM) program, with enterprise responsibility for the design, execution, and continuous improvement of risk-based processes across ...
Job Summary Leads and governs the CITGO Third Party Risk Management (TPRM) program, with enterprise responsibility for the design, execution, and continuous improvement of risk-based processes across ...
Provide thought leadership on ServiceNow GRC and SecOps trends and evaluate emerging requirements ... Third-Party Risk Management (TPRM) * 10+ years of demonstrated deep technical expertise in ...
Provide thought leadership on ServiceNow GRC and SecOps trends and evaluate emerging requirements ... Third-Party Risk Management (TPRM) * 10+ years of demonstrated deep technical expertise in ...
Ethics & Compliance Operations Manager
Houston, TX · On-site +1
Job Summary Leads and governs the CITGO Third Party Risk Management (TPRM) program, with enterprise responsibility for the design, execution, and continuous improvement of risk-based processes across ...
Ethics & Compliance Operations Manager
Houston, TX · On-site +1
Job Summary Leads and governs the CITGO Third Party Risk Management (TPRM) program, with enterprise responsibility for the design, execution, and continuous improvement of risk-based processes across ...
Third-Party Risk Management (TPRM) * 10+ years of demonstrated deep technical expertise in ... Proven experience with ServiceNow Security and GRC modules, with a strong understanding of platform ...
Third-Party Risk Management (TPRM) * 10+ years of demonstrated deep technical expertise in ... Proven experience with ServiceNow Security and GRC modules, with a strong understanding of platform ...
Ethics and Compliance Analyst
Houston, TX · On-site
Responsible for conducting thorough risk assessments and monitoring activities related to CITGO's third-party engagements to mitigate potential compliance risks. Utilizing analytical tools to ...
Ethics and Compliance Analyst
Houston, TX · On-site
Responsible for conducting thorough risk assessments and monitoring activities related to CITGO's third-party engagements to mitigate potential compliance risks. Utilizing analytical tools to ...
Director of Risk Management
Houston, TX · On-site
Property & Tenant Risk Oversight • Analyze and mitigate risks related to tenant operations, leasing, site security, property conditions, and third-party vendors. • Oversee claims management ...
Director of Risk Management
Houston, TX · On-site
Property & Tenant Risk Oversight • Analyze and mitigate risks related to tenant operations, leasing, site security, property conditions, and third-party vendors. • Oversee claims management ...
Third Party and Vendor Risk * Regulatory and Compliance alignment * Strong communication skills * Planning and organizing * Personal Leadership * Analytical and Risk Based decision making.
Third Party and Vendor Risk * Regulatory and Compliance alignment * Strong communication skills * Planning and organizing * Personal Leadership * Analytical and Risk Based decision making.
Property & Tenant Risk Oversight • Analyze and mitigate risks related to tenant operations, leasing, site security, property conditions, and third-party vendors. • Oversee claims management ...
Property & Tenant Risk Oversight • Analyze and mitigate risks related to tenant operations, leasing, site security, property conditions, and third-party vendors. • Oversee claims management ...
Third Party and Vendor Risk * Regulatory and Compliance alignment * Strong communication skills * Planning and organizing * Personal Leadership * Analytical and Risk Based decision making.
Third Party and Vendor Risk * Regulatory and Compliance alignment * Strong communication skills * Planning and organizing * Personal Leadership * Analytical and Risk Based decision making.
Director Supply Chain
$173K - $196K/yr
... third-party risk management, supply chain analytics, systems, governance and continuous improvement. This role delivers measurable business value through cost optimization, supplier performance, risk ...
Director Supply Chain
$173K - $196K/yr
... third-party risk management, supply chain analytics, systems, governance and continuous improvement. This role delivers measurable business value through cost optimization, supplier performance, risk ...
Supports Board and Risk Committee reporting by preparing materials and analysis as needed ... Supports the Bank's third-party cybersecurity risk management program across the vendor lifecycle:
Supports Board and Risk Committee reporting by preparing materials and analysis as needed ... Supports the Bank's third-party cybersecurity risk management program across the vendor lifecycle:
Director Supply Chain
Houston, TX · On-site
$173K - $196K/yr
... third-party risk management, supply chain analytics, systems, governance and continuous improvement. This role delivers measurable business value through cost optimization, supplier performance, risk ...
Director Supply Chain
Houston, TX · On-site
$173K - $196K/yr
... third-party risk management, supply chain analytics, systems, governance and continuous improvement. This role delivers measurable business value through cost optimization, supplier performance, risk ...
Implement structured workflows for third-party risk assessments that incorporate NIST SP 800-53 SR ... Risk Analysis and Decision Support * Perform qualitative and quantitative supply chain risk ...
Implement structured workflows for third-party risk assessments that incorporate NIST SP 800-53 SR ... Risk Analysis and Decision Support * Perform qualitative and quantitative supply chain risk ...
Associate Security Consultant
Houston, TX · On-site
Third Party Risk Management * Network and Server Infrastructure Security * Cloud Security (SaaS, PaaS, IaaS) * Mobile Application Security * Ability to review and analyse risks based on assessments ...
Associate Security Consultant
Houston, TX · On-site
Third Party Risk Management * Network and Server Infrastructure Security * Cloud Security (SaaS, PaaS, IaaS) * Mobile Application Security * Ability to review and analyse risks based on assessments ...
Manager - ServiceNow
Houston, TX · On-site +1
... Third-Party Risk Management workstreams in partnership with architects and product owners ... Experience with Performance Analytics, Predictive Intelligence, Now Assist, or generative ...
Manager - ServiceNow
Houston, TX · On-site +1
... Third-Party Risk Management workstreams in partnership with architects and product owners ... Experience with Performance Analytics, Predictive Intelligence, Now Assist, or generative ...
... third party supplier risk process and requirements Current or previous experience with risk assessment methodologies and conducting risk analysis in a regulated environment or related IT audit ...
... third party supplier risk process and requirements Current or previous experience with risk assessment methodologies and conducting risk analysis in a regulated environment or related IT audit ...
In addition, the Commercial organization is responsible for generating value from third party ... Risk Analyst Crude Analyst Natural Gas Analyst Power Analyst Scheduling Analyst 24 Hour Power ...
In addition, the Commercial organization is responsible for generating value from third party ... Risk Analyst Crude Analyst Natural Gas Analyst Power Analyst Scheduling Analyst 24 Hour Power ...
Grc Third Party Risk Analyst information
See Rosenberg, TX salary details
$39.7K - $46.2K
9% of jobs
$51.8K is the 25th percentile. Wages below this are outliers.
$46.2K - $52.7K
18% of jobs
$52.7K - $59.2K
0% of jobs
$59.2K - $65.7K
6% of jobs
$65.7K - $72.2K
2% of jobs
$72.2K - $78.6K
4% of jobs
$78.6K - $85.1K
2% of jobs
The median wage is $86.1K / yr.
$85.1K - $91.6K
52% of jobs
$91.6K - $98.1K
6% of jobs
$98.1K - $104.6K
0% of jobs
$104.6K - $111.1K
0% of jobs
$39.7K
$77.3K
$111.1K
How much do grc third party risk analyst jobs pay per year?
What are some typical challenges a GRC Third Party Risk Analyst may encounter when assessing vendors?
What are the key skills and qualifications needed to thrive as a GRC Third Party Risk Analyst, and why are they important?
What is a GRC Third Party Risk Analyst?
What is the difference between Grc Third Party Risk Analyst vs Grc Vendor Risk Analyst?
| Aspect | Grc Third Party Risk Analyst | Grc Vendor Risk Analyst |
|---|---|---|
| Certifications | Certifications like CRISC, CISA often preferred | Same certifications commonly required |
| Work Environment | Focuses on third-party relationships and risk assessments | Primarily evaluates vendor-specific risks and compliance |
| Industry Usage | Used across finance, healthcare, and tech sectors | Commonly found in industries with extensive vendor networks |
The Grc Third Party Risk Analyst and Grc Vendor Risk Analyst roles overlap significantly in certifications and work environment. The main difference lies in scope: the Third Party Risk Analyst assesses overall third-party relationships, while the Vendor Risk Analyst concentrates specifically on individual vendors. Both roles are vital for managing third-party risks in various industries.

Deloitte rating
8.2
Based on 92 frontline employees who took The Breakroom Quiz
45th of 150 rated financial services
Job description
ServiceNow Senior Consultant
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions that help clients navigate an evolving threat landscape. Through solutions and managed services that simplify complexity, we help clients operate with resilience, grow with confidence, and proactively manage cyber, risk, and technology programs.
Recruiting for this role ends on 12/31/2026.
Work you'll do
As a Senior Consultant - ServiceNow on the Cyber Strategy & Transformation team, you will be responsible for...
- Leading requirements workshops and stakeholder interviews to capture, validate, and document business requirements, user stories, and current-state and future-state process flows
- Analyzing processes, controls, and tools to identify opportunities for ServiceNow configuration and automation across IT Operations Management, IT Asset Management, Integrated Risk Management, Security Operations, Third-Party Risk Management, and ServiceNow AI Control Tower use cases
- Supporting functional design and configuration of ServiceNow solutions, including forms, workflows, notifications, service level agreements, dashboards, reports, roles, and access controls
- Documenting data models, taxonomies, workflows, controls, and reporting requirements for cyber, risk, and artificial intelligence governance use cases
- Producing project artifacts, including requirements documentation, functional designs, test scenarios, training materials, release notes, and deployment support materials
- Collaborating with client stakeholders, functional teams, and technical teams to support demonstrations, user acceptance testing, defect triage, training, cutover activities, and solution adoption
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments.
Qualifications
Required:
- Bachelor's degree in Computer Science, Information Systems, Cyber Security, Engineering, Information Technology, Finance, or Business
- 2+ years of experience supporting ServiceNow implementation projects in a client-facing consulting role
- 2+ years of experience gathering business requirements, facilitating workshops, documenting process flows or user stories, and producing functional documentation
- 2+ years of experience designing, configuring, or implementing ServiceNow solutions in one or more of the following modules: IT Operations Management, IT Asset Management, Integrated Risk Management, Security Operations, or Third-Party Risk Management
- 2+ years of experience configuring ServiceNow forms, workflows, notifications, service level agreements, reports, dashboards, roles, or access controls
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- ServiceNow Certified System Administrator (CSA)
- ServiceNow Certified Application Developer (CAD)
- ArchX (Architecture Excellence)
- One or more ServiceNow Certified Implementation Specialist (CIS) certifications, including CIS-Risk and Compliance (CIS-RC), CIS-Security Incident Response (CIS-SIR), CIS-Vulnerability Response (CIS-VR), CIS-Third-Party Risk Management (CIS-TPRM), CIS-Hardware Asset Management (CIS-HAM), CIS-Software Asset Management (CIS-SAM), CIS-Service Mapping (CIS-SM), CIS-Discovery (CIS-DISCO), CIS-Event Management (CIS-EM), CIS-Data Foundations (CIS-DF), or CIS-Strategic Portfolio Management (CIS-SPM)
- Experience supporting implementation and configuration of ServiceNow AI Control Tower capabilities, including AI inventory management, intake and approval workflows, lifecycle oversight, issue management, dashboards, and reporting
- Experience supporting identity governance for human and non-human actors using Veza, or cyber asset discovery and configuration management database (CMDB) integration using Armis
For individuals assigned and/or hired to work in a Remote role, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to a Remote role and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Qualifications:ServiceNow Senior Consultant
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions that help clients navigate an evolving threat landscape. Through solutions and managed services that simplify complexity, we help clients operate with resilience, grow with confidence, and proactively manage cyber, risk, and technology programs.
Recruiting for this role ends on 12/31/2026.
Work you'll do
As a Senior Consultant - ServiceNow on the Cyber Strategy & Transformation team, you will be responsible for...
- Leading requirements workshops and stakeholder interviews to capture, validate, and document business requirements, user stories, and current-state and future-state process flows
- Analyzing processes, controls, and tools to identify opportunities for ServiceNow configuration and automation across IT Operations Management, IT Asset Management, Integrated Risk Management, Security Operations, Third-Party Risk Management, and ServiceNow AI Control Tower use cases
- Supporting functional design and configuration of ServiceNow solutions, including forms, workflows, notifications, service level agreements, dashboards, reports, roles, and access controls
- Documenting data models, taxonomies, workflows, controls, and reporting requirements for cyber, risk, and artificial intelligence governance use cases
- Producing project artifacts, including requirements documentation, functional designs, test scenarios, training materials, release notes, and deployment support materials
- Collaborating with client stakeholders, functional teams, and technical teams to support demonstrations, user acceptance testing, defect triage, training, cutover activities, and solution adoption
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments.
Qualifications
Required:
- Bachelor's degree in Computer Science, Information Systems, Cyber Security, Engineering, Information Technology, Finance, or Business
- 2+ years of experience supporting ServiceNow implementation projects in a client-facing consulting role
- 2+ years of experience gathering business requirements, facilitating workshops, documenting process flows or user stories, and producing functional documentation
- 2+ years of experience designing, configuring, or implementing ServiceNow solutions in one or more of the following modules: IT Operations Management, IT Asset Management, Integrated Risk Management, Security Operations, or Third-Party Risk Management
- 2+ years of experience configuring ServiceNow forms, workflows, notifications, service level agreements, reports, dashboards, roles, or access controls
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- ServiceNow Certified System Administrator (CSA)
- ServiceNow Certified Application Developer (CAD)
- ArchX (Architecture Excellence)
- One or more ServiceNow Certified Implementation Specialist (CIS) certifications, including CIS-Risk and Compliance (CIS-RC), CIS-Security Incident Response (CIS-SIR), CIS-Vulnerability Response (CIS-VR), CIS-Third-Party Risk Management (CIS-TPRM), CIS-Hardware Asset Management (CIS-HAM), CIS-Software Asset Management (CIS-SAM), CIS-Service Mapping (CIS-SM), CIS-Discovery (CIS-DISCO), CIS-Event Management (CIS-EM), CIS-Data Foundations (CIS-DF), or CIS-Strategic Portfolio Management (CIS-SPM)
- Experience supporting implementation and configuration of ServiceNow AI Control Tower capabilities, including AI inventory management, intake and approval workflows, lifecycle oversight, issue management, dashboards, and reporting
- Experience supporting identity governance for human and non-human actors using Veza, or cyber asset discovery and configuration management database (CMDB) integration using Armis
For individuals assigned and/or hired to work in a Remote role, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to a Remote role and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Education:Bachelor's DegreeEmployment Type: