1

Senior Vendor Risk Analyst Jobs in Georgia (NOW HIRING)

Regularly report key risk metrics to senior leadership and stakeholders. Support Change Management ... or vendor risk assessments. * Demonstrated ability to communicate complex issues in a clear ...

Regularly report key risk metrics to senior leadership and stakeholders. Support Change Management ... or vendor risk assessments. * Demonstrated ability to communicate complex issues in a clear ...

The Investigations team is seeking a dynamic and energetic Sr. Risk Management Analyst with a propensity to think creatively and identify new ways to approach common problems. A thought leader who ...

Showing results 41-60

Senior Vendor Risk Analyst information

What is a senior vendor risk analyst?

A Senior Vendor Risk Analyst is a professional responsible for evaluating and managing the risks associated with third-party vendors and suppliers. They assess vendor practices, review compliance with regulations, and ensure that vendors meet an organization's security and operational standards. This role often involves conducting risk assessments, monitoring vendor performance, and collaborating with internal teams to mitigate potential threats to the business. Senior Vendor Risk Analysts typically have a strong background in risk management, information security, and regulatory compliance.

What is the difference between Senior Vendor Risk Analyst vs Vendor Risk Analyst?

AspectSenior Vendor Risk AnalystVendor Risk Analyst
CertificationsCRISC, CISA, or similarEntry-level certifications or none
Experience5+ years in risk management or vendor assessment1-3 years in vendor risk or related fields
Work EnvironmentCorporate, financial, or technology sectorsSimilar industries, often entry-level roles
ResponsibilitiesLeading risk assessments, developing policies, mentoringConducting vendor evaluations, supporting risk processes

The main difference between a Senior Vendor Risk Analyst and a Vendor Risk Analyst lies in experience, responsibilities, and certifications. The senior role involves leadership, advanced risk assessments, and strategic planning, while the vendor risk analyst typically focuses on supporting assessments and data collection. Both roles are vital in managing third-party risks within organizations, but the senior position requires more expertise and oversight.

How does a senior vendor risk analyst typically collaborate with other departments in the organization?

A Senior Vendor Risk Analyst works closely with departments such as procurement, IT, legal, compliance, and business units to assess and manage third-party risks. Collaboration often involves gathering information on new and existing vendors, coordinating risk assessments, and advising on contract clauses to mitigate potential issues. Effective communication and relationship-building are crucial, as the analyst must ensure all stakeholders understand the risk landscape and their respective responsibilities. This cross-functional teamwork helps maintain a comprehensive risk management approach and supports organizational objectives.

What are the key skills and qualifications needed to thrive as a senior vendor risk analyst?

To thrive as a Senior Vendor Risk Analyst, you need expertise in risk assessment, vendor management, and compliance, typically backed by a bachelor’s degree in business, finance, or a related field. Familiarity with risk management frameworks (such as ISO 27001), third-party risk assessment tools, and certifications like CISA or CRVPM are highly valuable. Strong analytical thinking, attention to detail, and effective communication skills set candidates apart in this role. These skills are crucial to ensure organizational security, regulatory compliance, and the mitigation of risks posed by third-party vendors.
What are the most commonly searched types of Vendor Risk Analyst jobs in Georgia? The most popular types of Vendor Risk Analyst jobs in Georgia are:
What cities in Georgia are hiring for Senior Vendor Risk Analyst jobs? Cities in Georgia with the most Senior Vendor Risk Analyst job openings:
Infographic showing various Senior Vendor Risk Analyst job openings in Georgia as of August 2026, with employment types broken down into 1% As Needed, 84% Full Time, 11% Part Time, 1% Temporary, and 3% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution.

Senior Security Third Party Risk (TPRM) Analyst

OneTrust

Atlanta, GA • On-site

Other

This job post has expired today. Applications are no longer accepted.


Job description

The Challenge

We are looking for a dynamic Senior Information Security GRC Analyst to support IT and InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team.

Your Mission

This role will support InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team.  In addition, this role will collaborate with architecture, legal, compliance, and privacy as part of our TPRM (Third Party Risk Management) process.  This role will help review risk assessments for customers/vendors, data flow diagrams, architecture diagrams, certifications, questionnaires, etc.   

You Are

This a team player who can work well within the GRC team. 

  • Collaborate with IT, InfoSec, and within the GRC team to mature the compliance process
  • Review vendor due diligence documentation, including SOC reports, ISO certifications, penetration testing reports, policies, and security questionnaires.
  • Evaluate supplier control environments against established risk management standards and frameworks.
  • Document risk findings and communicate recommendations to business stakeholders.
  • Execute risk assessments of third-party vendors
  • Mentor Junior Security Analysts, and work with them to evaluate and remediate complex security incidents 
  • Responsible for generation and continued delivery of relevant KPIs and metrics 
  • Provide feedback on solutions and processes to mature overall capabilities 
  • Impart expertise on the OneTrust environment and security best practices to others on the team
  • BA/BS in Computer Science, Cybersecurity, Information assurance or related subject 
You Experience Includes
  • 5+ years, hands on experience in cybersecurity/risk management  
  • Experience reviewing SOC 1, SOC 2 reports & ISO 27001 certifications
  • Experience reviewing security questionnaires, business continuity and disaster recovery plans as well as vendor contracts and security requirements
  • Understanding of information security best practices around confidentiality, integrity and availability 
  • Cloud experience in at least one cloud provider 
  • Understanding of applicable laws and regulations, including but not limited to, GDPR, CCPA, PCI-DSS, SOC 2, ISO, and FedRAMP
  • Understanding of the standards for the processing practice of third-party management
  • Understanding of technology domains including governance, risk management, security, privacy, and information technology and business continuity
Preferred Experience
  • Certifications: CRISC, Security+, CISSP, CISM, CCSP, CISA, Azure
  • Knowledge of OneTrust security/GRC products.