ZipRecruiter

Log In

1

Third Party Risk Analyst Jobs in Remote, OR (NOW HIRING)

Bausch + Lomb

Product Cybersecurity Architect

OR · On-site +1

... root cause analyses, and remediation efforts. * Partner with engineering teams to implement ... development and third-party risk management. * Experience working across cross-functional and ...

Lumen Technologies

Lead Contract Manager

OR · On-site

$105K - $141K/yr

The Role The Lead Contract Manager is responsible for negotiating and acquiring various 3rd Party ... analysis of invoices, etc. * Mentors, trains, and provides direction to other Contract Managers on ...

Agfa

Customer Support Analyst, Tier 1

OR · Remote

The Customer Support Analyst, Tier 1 will consult with users to provide remote technical support ... 3rd party products. * Meeting/respecting SLA-requirements defined in the Service Level Agreements ...

AGFA

Customer Support Analyst, Tier 1

OR · On-site +1

The Customer Support Analyst, Tier 1 will consult with users to provide remote technical support ... 3rd party products. * Meeting/respecting SLA-requirements defined in the Service Level Agreements ...

Infiltrator Water Technologies

EH&S Manager

Sutherlin, OR · On-site

$81K - $110K/yr

... risk reduction. * Lead incident investigations and root cause analysis (PDCA, Fishbone, 5-Why ... third-party providers to ensure a secure, compliant, and disruption-free work environment.

Infiltrator Water Technologies

IWT

Sutherlin, OR

$81K - $110K/yr

... risk reduction. * Lead incident investigations and root cause analysis (PDCA, Fishbone, 5-Why ... third-party providers to ensure a secure, compliant, and disruption-free work environment.

Infiltrator Water Technologies

EH&S Manager

Sutherlin, OR

$81K - $110K/yr

... risk reduction. * Lead incident investigations and root cause analysis (PDCA, Fishbone, 5-Why ... third-party providers to ensure a secure, compliant, and disruption-free work environment.

Umpqua Health

Solutions Engineer

Roseburg, OR · On-site +1

$100K - $118K/yr

NET, SQL Server, and third-party systems. * Design and support JavaScript and TypeScript solutions ... Analyze and validate data across multiple systems to ensure accuracy and consistency in reporting ...

Umpqua Health

Solutions Engineer

Roseburg, OR · Remote

NET, SQL Server, and third-party systems. * Design and support JavaScript and TypeScript solutions ... Analyze and validate data across multiple systems to ensure accuracy and consistency in reporting ...

AGFA

Director, Information Security

OR · On-site +1

Oversee risk assessments, privacy impact analyses, and security reviews. * Maintain and evolve the ... third-party and embedded solutions. * Partner with Marketing and commercial teams to articulate ...

Textexpander, Inc.

Revenue Operations Lead - 100% Remote

OR · On-site +1

$140K - $170K/yr

Integration Tooling - Proficiency with Zapier and comfort with at least one of: n8n, Make, Workato, or similar third-party middleware. * Analytical Skills - Strong proficiency in data analysis and ...

Infiltrator Water Technologies

IWT

Sutherlin, OR

... risk reduction. • Lead incident investigations and root cause analysis (PDCA, Fishbone, 5-Why ... third-party providers to ensure a secure, compliant, and disruption-free work environment.

next page

Showing results 1-20

All JobsThird Party Risk Analyst JobsThird Party Risk Analyst Jobs in Remote, OR

Third Party Risk Analyst information

See Remote, OR salary details

$15

$40

$65

How much do third party risk analyst jobs pay per hour?

As of Jul 24, 2026, the average hourly pay for third party risk analyst in Remote, OR is $40.45, according to ZipRecruiter salary data. Most workers in this role earn between $29.76 and $49.23 per hour, depending on experience, location, and employer.

How does a Third Party Risk Analyst typically collaborate with other departments to manage vendor risks?

A Third Party Risk Analyst works closely with departments such as procurement, legal, IT security, and compliance to assess and mitigate potential risks posed by vendors and service providers. Collaboration often involves reviewing contracts, conducting risk assessments, and ensuring vendors meet the organization's security and compliance requirements. Regular communication and joint meetings are common to align on risk standards and address any emerging concerns. This cross-functional teamwork ensures a comprehensive approach to managing third-party risks and maintaining regulatory compliance.

What is the difference between Third Party Risk Analyst vs Vendor Risk Analyst?

AspectThird Party Risk AnalystVendor Risk Analyst
CertificationsCertifications like CRISC, CISA often preferredSimilar certifications, often the same as Third Party Risk Analyst
Work EnvironmentFinancial institutions, corporations managing third-party relationshipsOrganizations assessing vendor security, compliance, and performance
Industry UsageCommon in finance, healthcare, and tech sectorsPrimarily in procurement, supply chain, and IT sectors

The main difference is that a Third Party Risk Analyst focuses on assessing risks associated with all third-party relationships, including vendors, partners, and service providers. A Vendor Risk Analyst specifically concentrates on evaluating risks posed by vendors and suppliers. While their roles overlap, the Third Party Risk Analyst has a broader scope, often handling multiple types of third-party relationships within various industries.

Is a grc analyst a good entry-level job?

A third-party risk analyst is often considered an entry-level role in risk management and compliance, suitable for individuals with strong analytical skills and knowledge of regulations like GDPR or HIPAA. The position typically involves assessing vendor risks, using tools like GRC software, and may require certifications such as CRISC or CISA. It provides a foundation for career growth in cybersecurity, compliance, or risk management fields.

How much does a third-party risk analyst make?

A third-party risk analyst typically earns between $60,000 and $100,000 annually, depending on experience, location, and industry. Entry-level positions may start lower, while experienced analysts with certifications like CRISC or CISSP can earn higher salaries.

Is third-party risk management a good career?

Third-party risk management is a growing field within risk analysis and compliance, focusing on assessing and mitigating risks from external vendors and partners. It requires skills in risk assessment, regulatory knowledge, and often involves using tools like risk management software. The role offers opportunities for career advancement in industries such as finance, healthcare, and technology.

What does a third-party risk analyst do?

A third-party risk analyst evaluates the risks associated with an organization’s external vendors, suppliers, and partners. They assess third-party security, compliance, and operational risks using tools like risk management software and often require knowledge of industry standards and certifications. Their goal is to ensure that external relationships do not compromise the organization’s security or compliance posture.

What are the key skills and qualifications needed to thrive as a Third Party Risk Analyst, and why are they important?

To thrive as a Third Party Risk Analyst, you need a solid understanding of risk management principles, vendor assessment processes, and compliance regulations, often supported by a degree in business, finance, or information security. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and certifications like CTPRA or CRISC is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills set exceptional analysts apart in this field. These competencies are crucial for identifying and mitigating vendor risks, ensuring organizational compliance, and safeguarding sensitive data.
What are the most commonly searched types of Third Party Risk Analyst jobs in Remote, OR? The most popular types of Third Party Risk Analyst jobs in Remote, OR are:
What are popular job titles related to Third Party Risk Analyst jobs in Remote, OR? For Third Party Risk Analyst jobs in Remote, OR, the most frequently searched job titles are:
What job categories do people searching Third Party Risk Analyst jobs in Remote, OR look for? The top searched job categories for Third Party Risk Analyst jobs in Remote, OR are:
Third Party Risk Analyst jobs near you
Infographic showing various Third Party Risk Analyst job openings in Remote, OR as of July 2026, with employment types broken down into 68% Full Time, 6% Part Time, and 26% Contract. Highlights an 60% Physical, 4% Hybrid, and 36% Remote job distribution, with an average salary of $84,127 per year, or $40.4 per hour.
Product Cybersecurity Architect

Product Cybersecurity Architect

Bausch + Lomb

OR • On-site, Remote

Full-time

Dental, Vision, Life, Retirement, PTO

This job post has expired today. Applications are no longer accepted.

Bausch & Lomb rating

8.6

Company rating: 8.6 out of 10

Based on 39 frontline employees who took The Breakroom Quiz

26th of 535 rated manufacturers

Job description

Bausch + Lomb (NYSE/TSX: BLCO) is a leading global eye health company dedicated to protecting and enhancing the gift of sight for millions of people around the world-from the moment of birth through every phase of life. Our mission is simple, yet powerful: helping you see better, to live better.
Our comprehensive portfolio of over 400 products is fully integrated and built to serve our customers across the full spectrum of their eye health needs throughout their lives. Our iconic brand is built on the deep trust and loyalty of our customers established over our 170-year history. We have a significant global research, development, manufacturing and commercial footprint of approximately 13,000 employees and a presence in approximately 100 countries, extending our reach to billions of potential customers across the globe. We have long been associated with many of the most significant advances in eye health, and we believe we are well positioned to continue leading the advancement of eye health in the future.
Why this Role Matters
Join the Surgical R&D organization in a role where you will help ensure the cybersecurity, safety, and reliability of innovative surgical products that support patient care. In this position, you will be responsible for embedding secure-by-design practices throughout the product lifecycle while partnering with engineering, quality, regulatory, and corporate security teams to deliver compliant and resilient solutions. This is a strong opportunity for someone who brings deep product security expertise, strong cross-functional collaboration skills, and a passion for advancing cybersecurity within a regulated medical device environment.
What You'll Do
  • Architect and implement a consistent cybersecurity strategy across surgical capital equipment product lines to establish a scalable and secure product ecosystem.
  • Embed secure-by-design principles throughout the product lifecycle, providing guidance on secure architecture, threat modeling, design controls, cryptography, and secure communication protocols.
  • Lead execution of cybersecurity requirements across development programs, ensuring alignment with regulatory expectations, corporate standards, and product quality objectives.
  • Coordinate vulnerability management activities, including intake, triage, risk assessment, remediation tracking, and documentation of product security issues through closure.
  • Serve as the Surgical R&D cybersecurity representative for vulnerability disclosure and incident response activities, supporting investigations, impact assessments, root cause analyses, and remediation efforts.
  • Partner with engineering teams to implement security testing practices, including SAST, DAST, SCA, penetration testing, and automated security controls within development pipelines.
  • Support supplier and third-party security initiatives by defining security requirements, managing software supply chain risks, and maintaining Software Bill of Materials (SBOM) processes.
  • Collaborate with Quality, Regulatory Affairs, IT, and Corporate Product Security teams to ensure compliance with evolving cybersecurity regulations and industry standards while enabling efficient product delivery.

What You'll Bring
Required Education & Experience:
  • Bachelor's degree in Engineering, Computer Science, Cybersecurity, or a related technical discipline.
  • 7+ years of experience in product security, application security, medical device cybersecurity, or software security within a regulated environment.
  • Demonstrated experience supporting or leading cybersecurity activities for medical device or other regulated product development programs.
  • Strong communication, collaboration, stakeholder management, and problem-solving skills.
  • Ability to translate technical cybersecurity risks into clear, actionable guidance for engineering, quality, and regulatory stakeholders.

Specialized Technical, Regulatory & Industry Skills & Knowledge
  • Strong expertise in secure product design, threat modeling, vulnerability management, and secure software development practices.
  • Working knowledge of connected device security, embedded systems, and software-enabled product architectures.
  • Experience with security testing tools and methodologies, including SAST, DAST, SCA, and penetration testing.
  • Understanding of software supply chain security practices, including SBOM development and third-party risk management.
  • Experience working across cross-functional and global teams to drive cybersecurity outcomes and influence stakeholders without direct authority.
  • Knowledge of secure development lifecycle (SDLC) frameworks, vulnerability disclosure processes, and product incident response activities.
  • Familiarity with cybersecurity governance, risk assessment, and compliance processes within regulated industries.

Preferred
  • Advanced degree in Cybersecurity, Computer Science, Engineering, or a related field.
  • Relevant industry certifications such as CISSP, CSSLP, OSCP, GWAPT, or equivalent.
  • Experience in medical device, healthcare, or other regulated industries, and/or working within a quality-managed or GxP regulated environment.
  • Working knowledge of medical device cybersecurity regulations and standards (e.g., FDA premarket/post market guidance, IEC 81001-5-1, AAMI TIR57, UL 2900, NIST frameworks).
  • Experience developing cybersecurity documentation to support regulatory submissions and audits.

This position may be available in the following location(s): US - Remote
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
For U.S. locations that require disclosure of compensation, the starting pay for this role is between $140,000 and $180,000. The estimated salary range reflects an anticipated range for this position. The actual base salary offered may depend on a variety of factors.
U.S. based employees may be eligible for short-term and/or long-term incentives. They may also be eligible to participate in medical, dental, vision insurance, disability and life insurance, a 401(k) plan and company match, a tuition reimbursement program (select degrees), company holidays, and well-being benefits, among others. U.S. based employees are also eligible to receive sick time, floating holidays and paid vacation.
Job Applicants should be aware of job offer scams perpetrated through the use of the Internet and social media platforms.
To learn more please read Bausch + Lomb's Job Offer Fraud Statement.
Our Benefit Programs: Employee Benefits: Bausch + Lomb
Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

What Bausch & Lomb employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Bausch & Lomb logo

About Bausch & Lomb

Sourced by ZipRecruiter

Bausch + Lomb (NYSE/TSX: BLCO) is a leading global eye health company dedicated to protecting and enhancing the gift of sight for millions of people around the world--from the moment of birth through every phase of life. Our mission is simple, yet powerful: helping you see better, to live better. Our comprehensive portfolio of over 400 products is fully integrated and built to serve our customers across the full spectrum of their eye health needs throughout their lives. Our iconic brand is built on the deep trust and loyalty of our customers established over our nearly 170-year history. We have a significant global research, development, manufacturing and commercial footprint of approximately 12,500 employees and a presence in approximately 100 countries, extending our reach to billions of potential customers across the globe. We have long been associated with many of the most significant advances in eye health, and we believe we are well positioned to continue leading the advancement of eye health in the future.

Industry

Medical equipment and supplies manufacturing

Company size

10,000+ Employees

Headquarters location

Bridgewater, NJ, US

Year founded

1853

View All Bausch & Lomb Jobs

Apply