As a GRC Analyst, you will play a pivotal role in ensuring our organization adheres to regulatory ... Support third-party risk management and vendor security assessments * Prepare and present regular ...
As a GRC Analyst, you will play a pivotal role in ensuring our organization adheres to regulatory ... Support third-party risk management and vendor security assessments * Prepare and present regular ...
The Supply Chain Risk Management Audit Analyst supports WDP's enterprise SCRM program by conducting structured, evidence-based security assessments of third-party vendor documentation and audit ...
The Supply Chain Risk Management Audit Analyst supports WDP's enterprise SCRM program by conducting structured, evidence-based security assessments of third-party vendor documentation and audit ...
Environmental Risk Analyst
Glen Allen, VA · On-site
$31.16 - $46.74/hr
Track third-party assignments, deliverables, timelines, and costs to ensure reviews align with loan ... analysis, data interpretation, or risk assessment. * 1-3 years of experience in environmental ...
Environmental Risk Analyst
Glen Allen, VA · On-site
$31.16 - $46.74/hr
Track third-party assignments, deliverables, timelines, and costs to ensure reviews align with loan ... analysis, data interpretation, or risk assessment. * 1-3 years of experience in environmental ...
Environmental Risk Analyst
Glen Allen, VA · On-site
Track third-party assignments, deliverables, timelines, and costs to ensure reviews align with loan ... analysis, data interpretation, or risk assessment. * 1-3 years of experience in environmental ...
Environmental Risk Analyst
Glen Allen, VA · On-site
Track third-party assignments, deliverables, timelines, and costs to ensure reviews align with loan ... analysis, data interpretation, or risk assessment. * 1-3 years of experience in environmental ...
... Risk Management (C-SCRM) professional to support U.S. Government stakeholders. The C-SCRM Analyst ... Evaluate vendor and supplier security postures (third-party/fourth-party) using frameworks such as ...
... Risk Management (C-SCRM) professional to support U.S. Government stakeholders. The C-SCRM Analyst ... Evaluate vendor and supplier security postures (third-party/fourth-party) using frameworks such as ...
Governance Risk and Compliance Specialist
Lynchburg, VA · On-site
$83K - $125K/yr
Practical experience with ERM tools and third-party risk management. * Exposure to Business ... Demonstrate strong analytical and problem-solving skills. * Support the development, implementation ...
Governance Risk and Compliance Specialist
Lynchburg, VA · On-site
$83K - $125K/yr
Practical experience with ERM tools and third-party risk management. * Exposure to Business ... Demonstrate strong analytical and problem-solving skills. * Support the development, implementation ...
Supply Chain Risk Management (SCRM) Lead
Falls Church, VA · On-site
$180K - $210K/yr
Supply Chain Risk Management (SCRM) Lead Falls Church, Virginia. Full-time. Important Notice: This ... Analyze software composition and third-party dependencies. * Interface with contracting and ...
Quick apply
Supply Chain Risk Management (SCRM) Lead
Falls Church, VA · On-site
$180K - $210K/yr
Supply Chain Risk Management (SCRM) Lead Falls Church, Virginia. Full-time. Important Notice: This ... Analyze software composition and third-party dependencies. * Interface with contracting and ...
Governance Risk and Compliance Specialist
Lynchburg, VA · On-site +1
$83K - $125K/yr
Contribute to third-party risk management by supporting vendor assessments and evaluations. * Help ... Demonstrate strong analytical and problem-solving skills. * Support the development, implementation ...
Governance Risk and Compliance Specialist
Lynchburg, VA · On-site +1
$83K - $125K/yr
Contribute to third-party risk management by supporting vendor assessments and evaluations. * Help ... Demonstrate strong analytical and problem-solving skills. * Support the development, implementation ...
Third-party risk assessments (financial, operational, geopolitical, cyber) * Continuous monitoring ... Leverage advanced analytics and digital tools to enhance risk detection and response Leadership ...
Third-party risk assessments (financial, operational, geopolitical, cyber) * Continuous monitoring ... Leverage advanced analytics and digital tools to enhance risk detection and response Leadership ...
Third-party risk assessments (financial, operational, geopolitical, cyber) * Continuous monitoring ... Leverage advanced analytics and digital tools to enhance risk detection and response Leadership ...
Third-party risk assessments (financial, operational, geopolitical, cyber) * Continuous monitoring ... Leverage advanced analytics and digital tools to enhance risk detection and response Leadership ...
... Risk Management (C-SCRM) professional to support U.S. Government stakeholders. The C-SCRM Analyst ... Evaluate vendor and supplier security postures (third-party/fourth-party) using frameworks such as ...
... Risk Management (C-SCRM) professional to support U.S. Government stakeholders. The C-SCRM Analyst ... Evaluate vendor and supplier security postures (third-party/fourth-party) using frameworks such as ...
Governance Risk and Compliance Specialist
Lynchburg, VA · On-site
$83K - $125K/yr
Practical experience with ERM tools and third-party risk management. * Exposure to Business ... Demonstrate strong analytical and problem-solving skills. * Support the development, implementation ...
Governance Risk and Compliance Specialist
Lynchburg, VA · On-site
$83K - $125K/yr
Practical experience with ERM tools and third-party risk management. * Exposure to Business ... Demonstrate strong analytical and problem-solving skills. * Support the development, implementation ...
... 3rd Party Risk Management, Business Continuity, Data Risk Governance, Model Risk, Financial Risk and Credit Risk while enabling these capabilities within our GRC platform. The Senior Principal will ...
... 3rd Party Risk Management, Business Continuity, Data Risk Governance, Model Risk, Financial Risk and Credit Risk while enabling these capabilities within our GRC platform. The Senior Principal will ...
Familiarity with supply chain operations, procurement, logistics, or third-party risk management. * Exposure to data tools such as Excel, SQL, or Python for data analysis (working knowledge preferred ...
Familiarity with supply chain operations, procurement, logistics, or third-party risk management. * Exposure to data tools such as Excel, SQL, or Python for data analysis (working knowledge preferred ...
As a GRC Analyst, you will play a pivotal role in ensuring our organization adheres to regulatory ... Support third-party risk management and vendor security assessments * Prepare and present regular ...
As a GRC Analyst, you will play a pivotal role in ensuring our organization adheres to regulatory ... Support third-party risk management and vendor security assessments * Prepare and present regular ...
... Risk Management (C-SCRM) professional to support U.S. Government stakeholders. The C-SCRM Analyst ... Evaluate vendor and supplier security postures (third-party/fourth-party) using frameworks such as ...
... Risk Management (C-SCRM) professional to support U.S. Government stakeholders. The C-SCRM Analyst ... Evaluate vendor and supplier security postures (third-party/fourth-party) using frameworks such as ...
Supply Chain Risk Management (SCRM) Lead
Falls Church, VA · On-site
$180K - $210K/yr
Supply Chain Risk Management (SCRM) Lead Falls Church, Virginia. Full-time. Important Notice: This ... Analyze software composition and third-party dependencies. * Interface with contracting and ...
Quick apply
Supply Chain Risk Management (SCRM) Lead
Falls Church, VA · On-site
$180K - $210K/yr
Supply Chain Risk Management (SCRM) Lead Falls Church, Virginia. Full-time. Important Notice: This ... Analyze software composition and third-party dependencies. * Interface with contracting and ...
Familiarity with supply chain operations, procurement, logistics, or third-party risk management. * Exposure to data tools such as Excel, SQL, or Python for data analysis (working knowledge preferred ...
Familiarity with supply chain operations, procurement, logistics, or third-party risk management. * Exposure to data tools such as Excel, SQL, or Python for data analysis (working knowledge preferred ...
Operating across 22 countries, Mobility Global is strengthening its third-party governance framework to support regulatory compliance, information security, and enterprise risk management. Reporting ...
Operating across 22 countries, Mobility Global is strengthening its third-party governance framework to support regulatory compliance, information security, and enterprise risk management. Reporting ...
Senior Manager, Vendor Risk & Procurement Governance - Mobility
Centreville, VA · On-site
$94K - $127K/yr
Operating across 22 countries, Mobility Global is strengthening its third-party governance framework to support regulatory compliance, information security, and enterprise risk management. Reporting ...
Senior Manager, Vendor Risk & Procurement Governance - Mobility
Centreville, VA · On-site
$94K - $127K/yr
Operating across 22 countries, Mobility Global is strengthening its third-party governance framework to support regulatory compliance, information security, and enterprise risk management. Reporting ...
Third Party Risk Analyst information
See Virginia salary details
$15.25 - $19.80
3% of jobs
$19.80 - $24.35
7% of jobs
$24.35 - $28.90
12% of jobs
$29.80 is the 25th percentile. Wages below this are outliers.
$28.90 - $33.45
15% of jobs
$33.45 - $38
13% of jobs
The median wage is $38.15 / hr.
$38 - $42.55
16% of jobs
$42.55 - $47.10
8% of jobs
$47.67 is the 75th percentile. Wages above this are outliers.
$47.10 - $51.65
11% of jobs
$51.65 - $56.20
6% of jobs
$56.20 - $60.75
6% of jobs
$60.75 - $65.30
3% of jobs
$15
$40
$65
How much do third party risk analyst jobs pay per hour?
How does a Third Party Risk Analyst typically collaborate with other departments to manage vendor risks?
What is the difference between Third Party Risk Analyst vs Vendor Risk Analyst?
| Aspect | Third Party Risk Analyst | Vendor Risk Analyst |
|---|---|---|
| Certifications | Certifications like CRISC, CISA often preferred | Similar certifications, often the same as Third Party Risk Analyst |
| Work Environment | Financial institutions, corporations managing third-party relationships | Organizations assessing vendor security, compliance, and performance |
| Industry Usage | Common in finance, healthcare, and tech sectors | Primarily in procurement, supply chain, and IT sectors |
The main difference is that a Third Party Risk Analyst focuses on assessing risks associated with all third-party relationships, including vendors, partners, and service providers. A Vendor Risk Analyst specifically concentrates on evaluating risks posed by vendors and suppliers. While their roles overlap, the Third Party Risk Analyst has a broader scope, often handling multiple types of third-party relationships within various industries.
What does a Third Party Risk Analyst do?
What are the key skills and qualifications needed to thrive as a Third Party Risk Analyst, and why are they important?

Job description
We are seeking a highly motivated and experienced Governance, Risk, and Compliance (GRC) Analyst to join our team. The ideal candidate will have at least five years of experience in GRC or IT risk, a bachelor's degree or higher in a related field, and professional certifications in GRC or cybersecurity. As a GRC Analyst, you will play a pivotal role in ensuring our organization adheres to regulatory requirements, manage risks effectively, and maintain robust governance practices for industry standards, frameworks and international data protection law.
Responsibilities:
- Develop, implement, and maintain governance, risk, and compliance frameworks, policies, standards and procedures.
- Conduct risk assessments and analyze potential threats to the organization's information systems and business operations.
- Monitor compliance with internal policies and external regulatory requirements (e.g., NIS2, DORA, ISO27001, AICPA Trust Principles, NIST, CIS, GDPR, SOX, HIPAA).
- Track changes to regional data protection law in the regions where EdgeConneX operates (APAC, EU, North America and South America)
- Collaborate with cross-functional teams to identify, assess, and mitigate risks across the organization.
- Maintain risk registers, compliance metrics, and reporting dashboards
- Support third-party risk management and vendor security assessments
- Prepare and present regular reports on risk management activities, compliance status, and remediation efforts to management.
- Support internal and external audits, including gathering documentation and facilitating audit processes.
- Stay up to date with changes in relevant laws, regulations, and industry best practices.
- Assist in the development and delivery of training programs related to governance, risk, and compliance topics.
- Contribute to continuous improvement of GRC processes and tooling
Required education & experience:
- Bachelor's degree or higher in Information Security, Computer Science, Business Administration, or a related field.
- Minimum of 5 years of professional experience in governance, risk, and compliance or a related discipline.
- Professional certifications such as CISA, CRISC, CISSP, CISM, ISO27001LA or similar are required.
- Strong understanding of regulatory requirements and frameworks (e.g., ISO 27001, NIST, PCI DSS).
- Risk assessment methodologies and control testing
- Excellent analytical and problem-solving skills.
- Strong communication and interpersonal skills, with the ability to work collaboratively across departments.
- Experience with:
- Policy development and lifecycle management
- Third-party/vendor risk assessments
- GRC tools and risk management platforms (e.g., DRATA, VANTA, Archer, OneTrust)
- Detail-oriented and highly organized, with a proactive approach to identifying and managing risks.
Preferred experience:
- Experience with GRC software platforms and tools.
- Project management experience or certification.
- Experience in a regulated industry (e.g., datacenter, finance, technology).
- Ability to train and mentor junior staff.
About EdgeConneX
Sourced by ZipRecruiter
Industry
Telecommunications
Company size
11 - 50 Employees
Headquarters location
Herndon, VA, US
Year founded
2009