Third Party Risk Senior Analyst

**Role Summary** ================ We are seeking a Third Party Risk Senior Analyst to support the organization’s Third-Party Risk Management (TPRM) program. This role is responsible for assessing, challenging, and monitoring third-party risks throughout the vendor lifecycle, ensuring alignment with internal policies, regulatory expectations, and the organization’s risk appetite. A key responsibility of this role is to provide effective challenge of Inherent Risk Questionnaires (IRQs) to ensure the information provided by Contract Owners and business stakeholders is accurate, complete, internally consistent, and appropriately reflects the nature and risk of the third-party engagement. The resulting inherent risk assessment determines the scope and level of due diligence and ongoing monitoring required for the third party. The ideal candidate will have experience in third-party risk management, operational risk, compliance, or audit, with practical experience conducting inherent risk assessments, financial and adverse media reviews, ongoing monitoring, and governance activities. **Key Responsibilities** ======================== **Risk Assessment & Due Diligence** ----------------------------------- * Conduct and provide effective challenge of Inherent Risk Questionnaires (IRQs) completed by Contract Owners and business stakeholders, assessing whether responses are accurate, complete, internally consistent, and appropriately reflect the nature of the supplier engagement. * Challenge responses where information appears incomplete, inconsistent, or does not appropriately reflect factors such as service criticality, data sensitivity, technology dependencies, regulatory impact, or other relevant risk considerations. * Ensure the IRQ appropriately identifies the supplier’s inherent risk, as this assessment determines the scope and level of required due diligence and ongoing monitoring. * Escalate material gaps, inconsistencies, or unresolved concerns before the inherent risk assessment is finalized. * Perform financial due diligence, including review of supplier financial health, financial risk indicators, and credit information. * Conduct adverse/negative media reviews to identify potential reputational, legal, regulatory, or operational concerns. * Assess supplier risk information and identify areas requiring additional due diligence, escalation, or risk mitigation. * Review relevant third-party risk documentation and supporting evidence to assess completeness and identify potential risk concerns. * Provide guidance to Contract Owners and business stakeholders on TPRM requirements and their responsibilities throughout the vendor lifecycle. **Ongoing Monitoring & Governance** ----------------------------------- * Conduct risk-based ongoing monitoring of third parties in accordance with established policies, standards, and monitoring requirements. * Monitor supplier risk indicators, including financial health and performance, adv