Third-Party Risk Management Analyst with AI - Remote

Remote role in CST timezone

Must have NIST 800-53

·        Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience

·        8 years of experience in cybersecurity, thirdparty risk management, IT risk, compliance, or a related discipline

·        Foundational understanding of cybersecurity principles, risk assessment methodologies, and common security control frameworks

·        Experience supporting projects or initiatives that require coordination across multiple stakeholders

·        Strong written and verbal communication skills, with the ability to clearly document risks and recommendations

·    Lead ThirdParty Cyber Risk Management initiatives across the full project lifecycle, including planning, execution, stakeholder coordination, reporting, and ongoing monitoring

·        Perform comprehensive cybersecurity risk assessments of thirdparty partners, identify security gaps, and deliver clear, actionable assessment reports with minimal supervision

·        Execute standardized inherent risk assessments and validate the accuracy of risk ratings, control evaluations, and remediation plans

·        Track, document, and follow up on thirdparty risk remediation activities to ensure timely closure and alignment with TMNA risk tolerance

·        Leverage Governance, Risk, and Compliance (GRC) platforms and AIdriven automation to streamline assessment workflows, reporting, and evidence collection

·        Partner with cybersecurity, procurement, legal, internal audit, and business stakeholders to support consistent and scalable thirdparty risk practices

·        Support continuous improvement of TPCRM processes by identifying inefficiencies and recommending process or tooling enhancements

·        Provide cybersecurity risk education to internal teams and thirdparty partners, promoting secure behaviors and awareness of emerging threats

·        Prepare metrics, dashboards, and summaries to support leadership visibility into thirdparty cyber risk posture

·        Utilize AI platforms and industry data to optimize assessment of workflows and enable greater focus on mitigating identified risks.