Third Party Risk Analyst

Fort Worth, TX company is seeking a Third Party Risk Analyst to join their team for a contract opportunity.

Leverage the latest technology to solve business problems in a collaborative environment at this Fortune 500 transportation giant. Top technical resources are retained on long-term contract engagements.
Responsible for leveraging cutting edge technology to solve business problems by participating in all phases of the development process from inception through transition, advocating the agile process and test-driven development, using object-oriented development tools to analyze, model, design, construct and test reusable objects, and making the codebase better.

Contract Duration: 4 Months

Required Skills & Experience

• Bachelor's degree in computer science, information systems, risk management, or a related field.
• Experience (1-3 years) in cyber risk management, vendor management, audit, compliance, information security, or a related field.
• Familiarity with regulatory requirements and industry best practices related to third-party risk management.
• Familiarity with vendor risk management principles and best practices, such as managing vendors through their lifecycle from onboarding to termination.
• Experience in conducting vendor risk assessments in alignment with minimum standards
• and requirements to identify gaps in vendor controls and facilitate discussion with the vendor to identify potential risk mitigation strategies.
• Knowledge of relevant cybersecurity frameworks (e.g., NIST CSF, ISO 27001) and regulations (e.g., TSA Cyber Amendment, HIPAA, GDPR).

Desired Skills & Experience

• Experience in contract negotiation and vendor management.
• Familiarity with industry-specific regulations (e.g., TSA, FAA, PCI DSS) and their cybersecurity requirements.
• Experience working in highly regulated industries such as finance, healthcare, or government.
• Ability to work independently and collaborate effectively with cross-functional teams.
• Strong analytical and problem-solving abilities.
• Proficiency in conducting risk assessments, evaluating vendor contracts, and identifying potential risks.
• Familiarity with conducting on-site assessments and evaluating vendors' controls and processes.
• Knowledge of relevant cyber security standards (e.g., NIST CSF, NIST 800-161, etc.)
• Knowledge of cybersecurity technologies, tools, and best practices.
• Familiarity with cybersecurity risk assessment methodologies and frameworks.
• Ability to stay updated with the latest cybersecurity trends, threats, and regulatory changes.

What You Will Be Doing

• Conduct assessments of third-party vendors to identify and evaluate potential risks.
• Review vendor contracts, service level agreements (SLAs), and other legal documents to ensure compliance with the Client’s risk management policies and regulatory requirements.
• Collaborate with various stakeholders to gather information and assess the overall risk exposure related to third-party relationships.
• Facilitate discussion with third-party vendors to identify potential risk mitigation strategies and controls to address identified risks.
• Monitor and track vendor performance, ensuring compliance with contractual obligations.
• Provide guidance and recommendations to the Client’s Business Units on selecting and managing third-party vendors.
• Maintain documentation of risk assessments, due diligence reviews, and compliance activities.
• Stay updated on industry trends, regulatory changes, and emerging risks related to third-party risk management.
• Decision making (what decisions will this position be making):
• Provide vendor risk assessment results to IT / Business owners to determine future vendor relationships.
• Identify and escalate critical risks and issues to senior management.
• Facilitate discussion with the vendor and business owner to identify strategies to mitigate risk.
• Determine the appropriate level of ongoing monitoring required for each vendor relationship.
• Communication (who will this position communicate with and in what capacity):
• Manager, Third Party Risk Management (TPRM)
• Report to TPRM Manager and provide progress updates on day-to-day TPRM program operations and activities.
• Attend regular meetings and reporting to facilitate the exchange of information, alignment of goals, and coordination of efforts between both roles.
• Facilitate review of risk exposure with the business owner to communicate vendor risks
• Provide risk exposure, mitigation strategies and other information to enable business decision making and business risk acceptance.
• Collaborate to ensure third party compliance with relevant laws, regulations, and contractual obligations.
• Collaborate with the Legal & Privacy teams to help align cybersecurity third party risk management practices with legal requirements and mitigate potential legal risks.
• Collaborate with the Legal & Privacy teams to help align cybersecurity third party risk management practices with IT vendor management policies, standards, and procedures.
• Engage with cybersecurity product teams to support identification, validation, and remediation of gaps and findings from third-party cybersecurity risk assessments.
• Engage in effective communication and collaboration between the various cybersecurity product teams.

You will receive the following benefits:

• Medical Insurance - Four medical plans to choose from for you and your family
• Dental & Orthodontia Benefits
• Vision Benefits
• Health Savings Account (HSA)
• Health and Dependent Care Flexible Spending Accounts
• Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance
• Hospital Indemnity Insurance
• 401(k) including match with pre and post-tax options
• Paid Sick Time Leave
• Legal and Identity Protection Plans
• Pre-tax Commuter Benefit
• 529 College Saver Plan

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer, including Veterans/Disability/Women. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.