1

Third Party Risk Analyst Jobs in Arkansas (NOW HIRING)

Ability to interpret, prioritize, and report technical risk from vulnerability data using analytics ... third party, such as an Agency recruiter, including unsolicited resumes sent to a Zoetis mailing ...

Ability to interpret, prioritize, and report technical risk from vulnerability data using analytics ... third party, such as an Agency recruiter, including unsolicited resumes sent to a Zoetis mailing ...

The Operational Risk Analyst I supports duties that involve research, analysis, reporting, and handling of confidential information, as well as communication with bank management and/or various bank ...

The Operational Risk Analyst I supports duties that involve research, analysis, reporting, and handling of confidential information, as well as communication with bank management and/or various bank ...

Third-Party Risk Management (TPRM): Provide executive oversight of the Third-Party Risk Management program, ensuring vendor risks are assessed, governed, and aligned with enterprise security and ...

Integrate ethics expectations into the supplier lifecyclein partnership with Third Party Risk ... Strong analytical skills to assess data sets. * Ability and flexibility to travel for business as ...

This includes weekly communication with the 3rd Party of Walmart choosing about consumable purchases. Providing in-depth analysis of weekly & monthly consumable orders. Maintaining an awareness of on ...

This includes weekly communication with the 3rd Party of Walmart choosing about consumable purchases. Providing in-depth analysis of weekly & monthly consumable orders. Maintaining an awareness of on ...

This includes weekly communication with the 3rd Party of Walmart choosing about consumable purchases. Providing in-depth analysis of weekly & monthly consumable orders. Maintaining an awareness of on ...

This includes weekly communication with the 3rd Party of Walmart choosing about consumable purchases. Providing in-depth analysis of weekly & monthly consumable orders. Maintaining an awareness of on ...

(USA) Risk Expert III

Elkins, AR · On-site

$90K - $180K/yr

As a Risk Expert III, you will lead the identification, assessment, and mitigation of ... Identify and analyze network security threats, vulnerabilities, and risks to recommend effective ...

(USA) Risk Expert III

Cave Springs, AR · On-site

$90K - $180K/yr

As a Risk Expert III, you will lead the identification, assessment, and mitigation of ... Identify and analyze network security threats, vulnerabilities, and risks to recommend effective ...

(USA) Risk Expert III

Greenland, AR · On-site

$90K - $180K/yr

As a Risk Expert III, you will lead the identification, assessment, and mitigation of ... Identify and analyze network security threats, vulnerabilities, and risks to recommend effective ...

(USA) Risk Expert III

Springdale, AR · On-site

$90K - $180K/yr

As a Risk Expert III, you will lead the identification, assessment, and mitigation of ... Identify and analyze network security threats, vulnerabilities, and risks to recommend effective ...

next page

Showing results 1-20

Third Party Risk Analyst information

See Arkansas salary details

$12

$33

$54

How much do third party risk analyst jobs pay per hour?

As of Jul 27, 2026, the average hourly pay for third party risk analyst in Arkansas is $33.48, according to ZipRecruiter salary data. Most workers in this role earn between $24.66 and $40.77 per hour, depending on experience, location, and employer.

How does a Third Party Risk Analyst typically collaborate with other departments to manage vendor risks?

A Third Party Risk Analyst works closely with departments such as procurement, legal, IT security, and compliance to assess and mitigate potential risks posed by vendors and service providers. Collaboration often involves reviewing contracts, conducting risk assessments, and ensuring vendors meet the organization's security and compliance requirements. Regular communication and joint meetings are common to align on risk standards and address any emerging concerns. This cross-functional teamwork ensures a comprehensive approach to managing third-party risks and maintaining regulatory compliance.

What is the difference between Third Party Risk Analyst vs Vendor Risk Analyst?

AspectThird Party Risk AnalystVendor Risk Analyst
CertificationsCertifications like CRISC, CISA often preferredSimilar certifications, often the same as Third Party Risk Analyst
Work EnvironmentFinancial institutions, corporations managing third-party relationshipsOrganizations assessing vendor security, compliance, and performance
Industry UsageCommon in finance, healthcare, and tech sectorsPrimarily in procurement, supply chain, and IT sectors

The main difference is that a Third Party Risk Analyst focuses on assessing risks associated with all third-party relationships, including vendors, partners, and service providers. A Vendor Risk Analyst specifically concentrates on evaluating risks posed by vendors and suppliers. While their roles overlap, the Third Party Risk Analyst has a broader scope, often handling multiple types of third-party relationships within various industries.

Is a grc analyst a good entry-level job?

A third-party risk analyst is often considered an entry-level role in risk management and compliance, suitable for individuals with strong analytical skills and knowledge of regulations like GDPR or HIPAA. The position typically involves assessing vendor risks, using tools like GRC software, and may require certifications such as CRISC or CISA. It provides a foundation for career growth in cybersecurity, compliance, or risk management fields.

How much does a third-party risk analyst make?

A third-party risk analyst typically earns between $60,000 and $100,000 annually, depending on experience, location, and industry. Entry-level positions may start lower, while experienced analysts with certifications like CRISC or CISSP can earn higher salaries.

Is third-party risk management a good career?

Third-party risk management is a growing field within risk analysis and compliance, focusing on assessing and mitigating risks from external vendors and partners. It requires skills in risk assessment, regulatory knowledge, and often involves using tools like risk management software. The role offers opportunities for career advancement in industries such as finance, healthcare, and technology.

What does a third-party risk analyst do?

A third-party risk analyst evaluates the risks associated with an organization’s external vendors, suppliers, and partners. They assess third-party security, compliance, and operational risks using tools like risk management software and often require knowledge of industry standards and certifications. Their goal is to ensure that external relationships do not compromise the organization’s security or compliance posture.

What are the key skills and qualifications needed to thrive as a Third Party Risk Analyst, and why are they important?

To thrive as a Third Party Risk Analyst, you need a solid understanding of risk management principles, vendor assessment processes, and compliance regulations, often supported by a degree in business, finance, or information security. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and certifications like CTPRA or CRISC is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills set exceptional analysts apart in this field. These competencies are crucial for identifying and mitigating vendor risks, ensuring organizational compliance, and safeguarding sensitive data.
What are the most commonly searched types of Third Party Risk Analyst jobs in Arkansas? The most popular types of Third Party Risk Analyst jobs in Arkansas are:
What are popular job titles related to Third Party Risk Analyst jobs in Arkansas? For Third Party Risk Analyst jobs in Arkansas, the most frequently searched job titles are:
What job categories do people searching Third Party Risk Analyst jobs in Arkansas look for? The top searched job categories for Third Party Risk Analyst jobs in Arkansas are:
Infographic showing various Third Party Risk Analyst job openings in Arkansas as of July 2026, with employment types broken down into 91% Full Time, 5% Part Time, 1% Temporary, and 3% Contract. Highlights an 82% Physical, 8% Hybrid, and 10% Remote job distribution, with an average salary of $69,633 per year, or $33.5 per hour.
Cyber Risk Analyst

Cyber Risk Analyst

Abaxis

Malvern, AR • On-site

Full-time

This job post has expired today. Applications are no longer accepted.


Job description

POSITION SUMMARY

Zoetis, Inc. is the world's largest producer of medicine and vaccinations for pets and livestock. The Zoetis Tech & Digital (ZTD) Global Technology Risk Management (TRM) Organizationis responsible forprotecting Zoetis' information resources. Within TRM, the global Identity, Directory & Access Management (IDAM) organization ensures that the right people have the right access to the right information.

TheCyberRiskAnalystis responsible foroverseeing the organization's vulnerability management program, focusing on IT infrastructure, endpoints, networks, and cloud environments. This role ensures proactive identification, analysis, prioritization, and remediation of technical vulnerabilities while embedding risk management practices to minimize security threats and support complianceobjectives. Additionally, theCyberRiskAnalystwill help track enterprise security risk by monitoring risk metrics,maintainingrisk registers, and providing regular updates to leadership, enabling informed decision-making and a holistic understanding of the organization's security posture.

POSITIONRESPONSIBILITIES

  • Own the enterprise cybersecurity risk register, taxonomy, and exception workflows with clear escalation thresholds.
  • Define and track KRIs/KPIs (e.g., residual risk, SLA compliance, control effectiveness); deliver executive dashboards and briefings.
  • Ensure asset and telemetry data quality and coverage; standardize with a Common Information Model (CIM).
  • Drive prioritized remediation roadmaps; enforce SLAs with automated reminders and escalations; verify fixes via retest.
  • Integrate post-incident lessons into the risk register and backlog;validatecontrols through purple-team exercises.
  • Include thirdparty/vendor and application security findings for a holistic enterprise risk view.
  • Map risks to policies and regulatory frameworks (NIST, ISO 27001, PCI-DSS, HIPAA); support audits and evidence collection.
  • Continuously improve VM processes, tooling, and control designs; measure the efficacy of controls and exceptions.
  • Be hands-on: query/validatedata, build metrics/dashboards, and translate technical issues into clear risk treatment plans.
  • Engage stakeholders to drive decisions and timelines; tie outcomes to OKRs focused on risk reduction and faster decision cycles.

EDUCATION AND EXPERIENCE

Education:

  • Bachelor's degree in computer sciences, Information Security, Information Systems, Engineering,Sciencesor relevant professional experience.

Experience:

  • 5+ years of hands-on experience in vulnerability management, cyber risk, or related roles within enterprise IT environments.

TECHNICAL SKILLS REQUIREMENTS

  • Proficiencywith vulnerability scanning and security testing tools (e.g., Tenable, Qualys, Rapid7, Falcon Spotlight,AppScan) and using results to improve security operations.
  • Experience across infrastructure systems, endpoints, network devices, and cloud platforms (AWS, Azure, Microsoft 365/O365).
  • Ability to interpret, prioritize, and report technical risk from vulnerability data using analytics and data visualization tools (e.g., Power BI, Tableau).
  • Working knowledge and practical application of security frameworks and compliance requirements (e.g., NIST, PCI-DSS, HIPAA, ISO 27001).
  • Experience coordinating remediation across technical and business teams, managing SLAs, and improving remediation processes.
  • Understanding ofvulnerability assessments, security policy development, enterprise security strategy, architecture concepts, and governance practices.
  • Broad understanding of security technologies, core security principles, control frameworks, and risk considerations for both on-prem and cloud solutions; familiarity with threat modeling concepts.
  • Ability to research vulnerabilities and exploit techniques and translate findings into operational improvements.
  • Hands-on capability to troubleshoot complex issues and implement solutions in enterprise environments.
  • Strong project management skills withabilityto manage multiple priorities in fast-paced operational environments.
  • Strong written/verbal communication skills; ability to present clearly, negotiate effectively, and influence stakeholders across levels; able to work independently and in teams.
  • High standardsof ethics, professionalism, and integrity.
  • Experience in regulated industries (e.g.,pharmaceuticals) is desirable.
  • Ability to articulate business-focused security outcomes that guide service direction and improve security posture.

PHYSICALPOSITIONREQUIREMENTS

  • Primarily office-based workinvolvingsitting, computer use, and meetings.
  • Ability to work flexible hours as needed to coordinate with global teams and support audit readiness activities.
  • Occasional travel may berequiredfor audits, regulatory meetings, orintegrationactivities.
  • No unusual physical demands or attendance requirementsexpected.

Travel Requirements: 5%-10%

Full timeRegularColleague

Any unsolicited resumes sent to Zoetis from a third party, such as an Agency recruiter, including unsolicited resumes sent to a Zoetis mailing address, fax machine or email address, directly to Zoetis employees, or to Zoetis resume database will be considered Zoetis property. Zoetis will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume.

Zoetis will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor but does not have the appropriate approvals to be engaged on a search.

Notice: Zoetis Recruiters will contact candidates via email from an address ending in @zoetis.com and may also initially connect with candidates through LinkedIn, including LinkedIn InMail. Zoetis does not use Gmail, Outlook, Yahoo, or other web-based/generic email domains to communicate about job opportunities, interviews, or offers of employment. If you receive a recruitment-related email message claiming to be from Zoetis that does not come from @zoetis.com, please treat it as suspicious. For your security, do not reply, click links, open attachments, share personal or financial information, or send money in response to unexpected or questionable recruitment communications.

Zoetis is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability or veteran status or any other protected classification. Disabled individuals are given an equal opportunity to use our online application system. We offer reasonable accommodations as an alternative if requested by an individual with a disability. Please contact Zoetis Colleague Services at zoetiscolleagueservices@zoetis.com to request an accommodation. Zoetis also complies with all applicable national, state and local laws governing nondiscrimination in employment as well as employment eligibility verification requirements of the Immigration and Nationality Act. All applicants must possess or obtain authorization to work in the US for Zoetis. Zoetis retains sole and exclusive discretion to pursue sponsorship for the acquisition or maintenance of nonimmigrant status and employment eligibility, considering factors such as availability of qualified US workers. Individuals requiring sponsorship must disclose this fact. Please note that Zoetis seeks information related to job applications from candidates for jobs in the U.S. solely via the following: (1) our company website at www.Zoetis.com/careers site, or (2) via email to/from addresses using only the Zoetis domain of "@zoetis.com". In addition, Zoetis does not use Google Hangout for any recruitment related activities. Any solicitation or request for information related to job applications with Zoetis via any other means and/or utilizing email addresses with any other domain should be disregarded. In addition, Zoetis will never ask candidates to make any type of personal financial investment related to gaining employment with Zoetis.

Abaxis logo

About Abaxis

Sourced by ZipRecruiter

Industry

Medical equipment and supplies manufacturing

Company size

201 - 500 Employees

Headquarters location

Union City, CA, US

Year founded

1995

Social media