Third-Party Risk Analyst

Hybrid Tues, Wed, Thurs onsite in Boston, MA

An American real estate investment trust that owns, develops, and operates wireless and broadcast communications infrastructure in several countries. The organization focuses on long-term value creation and operational excellence across its portfolio.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $60.00 to $70.00/hr. w2

Responsibilities

• Assess third-party vendors for inherent and residual risk across cybersecurity, privacy, compliance, financial stability, and operational resilience.
• Conduct and review vendor due-diligence questionnaires, SOC reports, penetration test results, and other security and compliance documentation.
• Monitor vendor performance and risk posture over time, track remediation plans, and validate corrective actions.
• Collaborate with Procurement, Legal, IT Security, and Business Owners to identify, document, and mitigate third-party risks.
• Maintain the TPRM platform with accurate data, evidence management, workflow tracking, and progress updates.
• Independently manage end-to-end TPRM assessments and reassessments for 30+ vendors per month, including communications, follow-ups, and timely review of questionnaires and artifacts.
• Maintain up-to-date progress notes within the tool for leadership and internal partner visibility.
• Support enhancements to TPRM policies, procedures, risk scoring methodologies, and leadership or regulatory reporting.

Experience Requirements

• Minimum 2 years of TPRM or risk-related experience required; 3 to 5 years of related industry experience preferred.
• Knowledge of the third-party or vendor management lifecycle, related controls, processes, and risk exposure across identification, selection, management, and termination.
• Strong operational risk management experience across identification, assessment, mitigation, prioritization, monitoring, and reporting.
• Understanding of regulatory requirements and expectations related to TPRM.
• Strong organization, planning, and project management skills with the ability to prioritize and meet deadlines.
• Ability to work with cross-functional groups and multiple organizational levels to achieve results.
• Leadership capability to drive and motivate stakeholders to outcomes.

Education Requirements

• Bachelor’s degree or equivalent work experience.