Senior Third-Party Risk Analyst Top 3 Skills Third-Party Risk Management (TPRM) - hands-on vendor assessment lifecycle from intake through remediation Security framework fluency - SOC 2, ISO 27001, NIST CSF, FedRAMP, PCI DSS Risk communication - ability to translate complex findings for both technical teams and executive stakeholders What You'll Do Lead end-to-end risk assessments for new and existing vendors, covering cybersecurity posture and regulatory compliance Review vendor-submitted secu