1

Third Party Risk Analyst Jobs in Denton, TX (NOW HIRING)

Looking for Third-Party Risk Management Analyst Location: Plano, TX Description Summary: * Lead Customer's Thirdโ€‘Party Cyber Risk Management initiatives across the full project lifecycle, including ...

The Analyst will support Change Management Risk Assessments from an AML and Sanctions lens ... Support Third-Party Risk Assessment reviews by helping evaluate AML and Sanctions risks associated ...

Vendor Risk Manager

Westlake, TX ยท On-site

$36.78 - $40.87/hr

Tackle complex problems of diverse scope, requiring the evaluation of a variety of tangible and intangible factors through data analysis. * Ensure that third-party risk management practices ...

next page

Showing results 1-20

Third Party Risk Analyst information

See Denton, TX salary details

$14

$37

$61

How much do third party risk analyst jobs pay per hour?

As of Aug 20, 2026, the average hourly pay for third party risk analyst in Denton, TX is $37.96, according to ZipRecruiter salary data. Most workers in this role earn between $27.93 and $46.20 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a third party risk analyst?

To thrive as a Third Party Risk Analyst, you need a solid understanding of risk management principles, vendor assessment processes, and compliance regulations, often supported by a degree in business, finance, or information security. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and certifications like CTPRA or CRISC is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills set exceptional analysts apart in this field. These competencies are crucial for identifying and mitigating vendor risks, ensuring organizational compliance, and safeguarding sensitive data.

How does a third party risk analyst typically collaborate with other departments to manage vendor risks?

A Third Party Risk Analyst works closely with departments such as procurement, legal, IT security, and compliance to assess and mitigate potential risks posed by vendors and service providers. Collaboration often involves reviewing contracts, conducting risk assessments, and ensuring vendors meet the organization's security and compliance requirements. Regular communication and joint meetings are common to align on risk standards and address any emerging concerns. This cross-functional teamwork ensures a comprehensive approach to managing third-party risks and maintaining regulatory compliance.

What is the difference between Third Party Risk Analyst vs Vendor Risk Analyst?

AspectThird Party Risk AnalystVendor Risk Analyst
CertificationsCertifications like CRISC, CISA often preferredSimilar certifications, often the same as Third Party Risk Analyst
Work EnvironmentFinancial institutions, corporations managing third-party relationshipsOrganizations assessing vendor security, compliance, and performance
Industry UsageCommon in finance, healthcare, and tech sectorsPrimarily in procurement, supply chain, and IT sectors

The main difference is that a Third Party Risk Analyst focuses on assessing risks associated with all third-party relationships, including vendors, partners, and service providers. A Vendor Risk Analyst specifically concentrates on evaluating risks posed by vendors and suppliers. While their roles overlap, the Third Party Risk Analyst has a broader scope, often handling multiple types of third-party relationships within various industries.

How much does a third party risk analyst make?

A third party risk analyst typically earns between $60,000 and $100,000 annually, depending on experience, location, and industry. Entry-level positions may start lower, while experienced analysts with certifications like CRISC or CISSP can earn higher salaries. The role often requires strong analytical skills and knowledge of risk management tools.

Is third party risk analyst a good career?

A third party risk analyst evaluates and manages risks associated with external vendors and partners, often requiring knowledge of compliance, cybersecurity, and risk management tools. The role offers opportunities in industries such as finance, healthcare, and technology, with a growing demand due to increasing regulatory requirements and supply chain complexities.

What does a third party risk analyst do?

A third party risk analyst evaluates the risks associated with an organization's external vendors, suppliers, and partners. They assess compliance, security, and operational risks using tools like risk management frameworks and may conduct audits or reviews to ensure third-party adherence to company standards.

What are popular job titles related to Third Party Risk Analyst jobs in Denton, TX?

For Third Party Risk Analyst jobs in Denton, TX, the most frequently searched job titles are:

What job categories do people searching Third Party Risk Analyst jobs in Denton, TX look for?

The top searched job categories for Third Party Risk Analyst jobs in Denton, TX are:

What cities near Denton, TX are hiring for Third Party Risk Analyst jobs?

Cities near Denton, TX with the most Third Party Risk Analyst job openings:

Infographic showing various Third Party Risk Analyst job openings in Denton, TX as of August 2026, with employment types broken down into 1% As Needed, 86% Full Time, 10% Part Time, and 3% Contract. Highlights an 89% Physical, 4% Hybrid, and 7% Remote job distribution, with an average salary of $78,956 per year, or $38 per hour.

GRC Analyst - Enterprise & Third Party Risk

Caris Life Sciences

Irving, TX โ€ข On-site

Full-time

Re-posted 2 days ago


Job description

At Caris, we understand that cancer is an ugly word-a word no one wants to hear, but one that connects us all. That's why we're not just transforming cancer care-we're changing lives.
We introduced precision medicine to the world and built an industry around the idea that every patient deserves answers as unique as their DNA. Backed by cutting-edge molecular science and AI, we ask ourselves every day: "What would I do if this patient were my mom?" That question drives everything we do.
But our mission doesn't stop with cancer. We're pushing the frontiers of medicine and leading a revolution in healthcare-driven by innovation, compassion, and purpose.
Join us in our mission to improve the human condition across multiple diseases. If you're passionate about meaningful work and want to be part of something bigger than yourself, Caris is where your impact begins.
Position Summary
Working as part of the Information Security Team, the GRC Analyst - Enterprise & Third Party Risk will support and lead internal risk assessments, exception reviews, and third-party risk management activities. This role plays a critical part in identifying, assessing, and monitoring risks across internal systems and third-party vendors while ensuring that exceptions to policy are appropriately evaluated and documented. The ideal candidate will bring strong analytical capabilities and a proactive approach to governance, risk, and compliance.
Job Responsibilities
  • Conduct internal risk assessments across business units, systems, applications and processes to identify potential security, operational, and compliance risks.
  • Develop and maintain the internal risk register and facilitate periodic risk reviews with control owners and business stakeholders.
  • Develop dashboards, reports, and metrics to communicate risk status, trends, and program effectiveness to leadership.
  • Evaluate risk exception requests, perform risk-based analysis, and ensure appropriate documentation, approval, and tracking.
  • Lead and support third-party risk management activities including vendor due diligence, risk assessments, contract reviews, and ongoing monitoring.
  • Partner with procurement, legal, and business stakeholders to embed security and risk requirements into vendor lifecycle processes.
  • Assist in defining and maintaining IT and organizational policies, standards, and procedures related to security, risk, and compliance.
  • Support internal and external audits (e.g., HIPAA, SOX, GDPR) by collecting evidence and addressing audit findings and recommendations.
  • Collaborate with IT and business teams to assess the adequacy and effectiveness of internal controls and drive remediation efforts.
  • Conduct periodic gap assessments and ensure controls are maintained to support ongoing compliance.
  • Stay abreast of changes in regulatory requirements and industry best practices related to risk management, third-party governance, and cybersecurity.
  • Assist with the creation and delivery of security awareness training related to risk, vendor management, and compliance requirements.
  • Participate in the development and maintenance of business continuity, disaster recovery, and incident response processes from a risk perspective.

Required Qualifications
  • Bachelor's degree in Information Security, Risk Management, or a related field; or equivalent work experience.
  • Minimum of 4 years of experience in Information Security Risk Management, Third-Party Risk, or GRC functions.
  • Strong understanding of internal control assessments, exception management, and third-party/vendor risk practices.
  • Familiarity with legal and regulatory compliance standards such as HIPAA, SOX, GDPR, etc.
  • Knowledge of security and risk frameworks such as NIST Cybersecurity Framework, ISO 27001, and CIS Controls.
  • Excellent communication skills with the ability to collaborate effectively across technical and non-technical teams.
  • Ability to translate technical risks into business impacts for non-technical audiences.
  • Strong analytical and problem-solving abilities with experience interpreting risk data to drive decision-making.
  • Demonstrated ability to manage multiple assessments or projects simultaneously in a fast-paced environment.
  • Experience writing policies, standards, procedures, or risk documentation..
  • Working knowledge of data protection concepts such as data classification, encryption, access management, and secure data handling.
  • Proficiency in Microsoft Excel, PowerPoint, and other data/reporting tools commonly used to support risk analysis and presentations.
  • Ability to work independently with minimal supervision while maintaining a high attention to detail.

Preferred Qualifications
  • Industry certifications such as CISA, CRISC, CISSP are highly desirable.
  • Experience using GRC or IRM platforms (e.g., Compyl, AuditBoard, RSA Archer, LogicGate, or similar).
  • Experience with SOC 2, PCI-DSS, HITRUST, or other security compliance frameworks.
  • Experience in healthcare or life sciences industry is a plus.
  • Background supporting cloud security or assessing cloud service providers (AWS, Azure, GCP).
  • Experience conducting business impact analyses (BIA) or participating in business continuity/disaster recovery planning.
  • Prior involvement in incident response processes or evaluating post-incident risk implications.
  • Strong understanding of contract language related to security, privacy, liability, and service-level obligations.
  • Familiarity with quantitative risk analysis methodologies (e.g., FAIR).
  • Experience working in organizations undergoing rapid growth, security transformation, or compliance maturity improvements.

Physical Demands
  • Must possess the ability to sit and/or stand for long periods of time.
  • May be required to lift routine office supplies and use standard office equipment.

Other
  • This position may require periodic travel and availability during evenings, weekends, or holidays depending on business needs.

Conditions of Employment: Individual must successfully complete pre-employment process, which includes criminal background check, drug screening, credit check ( applicable for certain positions) and reference verification.
This job description reflects management's assignment of essential functions. Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.
Caris Life Sciences is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, gender identity, sexual orientation, age, status as a protected veteran, among other things, or status as a qualified individual with disability.