Job Title: Third Party GRC Analyst
Primary Location: Los Angeles, CA (Remote)
Position Type: Direct Hire
OVERVIEW:
TalentFish is partnered with our client to find a Third Party Governance, Risk, and Compliance (GRC) Analyst ! This position is a key role within the Information Security team and supports the execution of Third Party Risk Management (TPRM), Client Compliance, and IT Risk Management programs. The ideal candidate will have strong experience across the GRC lifecycle and a passion for identifying and mitigating third-party risks in a highly regulated environment.
Supporting all phases of the TPRM lifecycle, from onboarding to offboarding vendors.
Conducting third-party risk assessments to identify and mitigate privacy and security risks.
Requesting, reviewing, and tracking due diligence documentation using MS Excel and/or Confluence.
Reviewing vendor risk documentation (e.g., SIG questionnaires, SOC2 Type II, SSAE18 reports, policies, etc.).
Applying knowledge of NIST CSF and regulatory frameworks (GDPR, etc.) in risk assessments.
Collaborating with internal stakeholders to track and report on vendor issues and remediation.
Coordinating InfoSec evaluations of vendor security controls.
Assisting with key risk reporting and metrics development.
Partnering with Procurement/Contracts teams to support vendor agreement reviews.
Supporting Client Compliance efforts, including assessment responses and coordination with clients.
Contributing to continuous improvement initiatives within the GRC program (including automation).
Staying current on developments in TPRM and GRC practices.
Participating in various ad hoc GRC and risk-related projects.
WHAT YOU'LL NEED:
Proficiencies:
Strong understanding of TPRM and the outsourcing lifecycle.
Working knowledge of GRC best practices, frameworks, and principles.
Familiarity with security and privacy regulations such as NIST, ISO, GDPR, CCPA.
Highly organized with attention to detail and the ability to work independently.
Strong written and verbal communication skills.
Ability to collaborate with internal and external stakeholders across functions.
Qualifications:
3+ years of experience in Third Party Risk Management, GRC, InfoSec, or related roles.
Experience in regulated industries (financial, legal, healthcare) or with Big 4 consulting firms.
Demonstrated ability to manage vendor cybersecurity evaluations.
Professionalism, accountability, and a commitment to excellence in risk and compliance.
Compensation Information
The expected salary range for this position is $90,000-$120,000 per year, depending on experience and qualifications. This role also offers comprehensive benefits, including health insurance, a 401(k) plan, and paid time off. TalentFish is committed to pay transparency and equal opportunity. The salary range provided complies with applicable state and federal regulations.
...shifts, and works as scheduled Jerrys may give preference to an individual who: Is friendly and outgoing and promotes customer service for the entire team Knows about meats, seafood, seasonings and good recipes Attended Food Safety training Is motivated to...
...Description Do you have experience as an ASL Interpreter? We are looking for ASL interpreters for government-related assignments... ...and acronyms Requirements ~ Bachelor's Degree in American Sign Language ~3+ years of ASL interpreting experience ~ Experience...
...may be required. Responsibilities: # Serve as the primary resources for hiring department and leadership throughout the recruitment process. Work closely with leadership to understand their hiring needs and help them refine their recruitment strategies by sharing...
Scale our finance infrastructure globally!Stripe builds the most powerful and flexible tools for running an internet business. We handle billions of dollars each year and enable millions of users around the world to scale faster and more efficiently by building their...
...! YOU MUST BE MOTIVATED BY THE FOLLOWING: - Will require driving throughout Putnam, Rockland, and/or Easter Orange Counties for sales, events, & coaching (we will provide monthly gas card based on sales routes)- Must have a business background or interest in strategic...