Jobs → Data & Analytics → GRC & Third-Party Risk Management Analyst

About the Role We are looking for an experienced GRC and Third-Party Risk Management professional to join our team on a freelance basis. This role focuses on managing third-party vendor risks and ensuring compliance with various security standards. Key Responsibilities • Conduct third-party vendor risk assessments and security reviews • Review SOC 2 reports, security questionnaires, policies, and supporting evidence • Identify control gaps, assess risks, and recommend remediation measures • Support vendor due diligence, onboarding, and ongoing risk monitoring • Develop and maintain GRC policies, SOPs, and compliance documentation • Assess AI-enabled vendors and use cases for privacy, security, and governance risks • Coordinate with security, legal, procurement, and business stakeholders • Prepare risk reports and communicate findings to technical and executive stakeholders Requirements • 5+ years of experience in GRC and Third-Party Risk Management • Strong knowledge of regulatory compliance standards such as SOC 2, ISO 27001, NIST 800-53, HIPAA, PCI-DSS, FedRAMP, HITRUST, FISMA, GDPR, and CCPA • Experience with AI governance and AI-driven vendor risk assessment • Proficiency in tools and platforms like RSA Archer, OneTrust, ServiceNow GRC, Vanta, RegScale, KnowBe4, Privacera, SharePoint, Jira, Confluence, Power BI, and Microsoft Office Suite