Third Party Risk Analyst

100% Remote

Important Notes from Hiring Manager:
Ability to manage tasks independently and take ownership of responsibilities.
Ability to adapt to a rapidly changing environment.
Ability to organize and prioritize workload.

Experience:
4+ years related work experience or equivalent combination of transferable experience and education
Experience in the Technology, Healthcare, Financial industry
Experience with integrated risks management tools (RSA Archer preferred)

Job Description:
This role serves as an analyst with experience applying broad audit, risk management or consulting techniques. TPRM is a critical function needed to both ensure value creation and management of financial, information security, legal, operational, regulatory/contractual, reputation and strategic risks. The role helps ensure the GuideWell enterprise employs a responsive, targeted enterprise-wide framework to evaluate, respond to, and monitor third party risk. The incumbent is an individual contributor who assists the TPRM team in the performance of its goals and objectives.

Essential Functions
The essential functions listed represent the major duties of this role, additional duties may be assigned.
Supports TPRM team as part of executing the third-party risk management program, including ensuring policies and procedures are followed to enable effective oversight of the overall Enterprise Third-party Risk Management program.
Interacts with third-parties, as needed, to perform reviews relating to the following control and process areas: information technology/security, operational, business resiliency, and regulatory/contractual compliance.
Analyzes third-party risk as part of due diligence reviews for potential business partners to determine the adequacy of financial, operational and IT internal controls.
Able to develop understanding of applicable laws, regulations, other government mandates, professional standards, conformance to industry best practices and relevance to the Company’s business and IT and Information Security environments.
Identifies and escalates complexities associated with coordination across multiple areas, conflicting efforts, and limited resources.

Years of Experience
4+ years related work experience

Education Level
Related Bachelor’s degree or additional related equivalent work experience

Additional Requirements
Awareness of information security concepts, practices, and tools.
Awareness of health care industry practices and applicable regulatory requirements.
Proven ability to maintain confidentiality regarding sensitive information.
Strong business-focused problem-solving skills.
Excellent interpersonal skills with a demonstrated ability to establish relationships with team members.

Additional Preferred Qualifications:
Any of the following: Certified Information Systems Auditor (CISA) or Certified Internal Auditor (CIA) or Certified Third-Party Risk Management Professional (C3PRMP) or Certified Third-Party Risk Professional (CTPRP)
Experience at a regional or international accounting and/or consulting firm.
Familiarity with a Governance, Risk and Compliance suite of tools, preferably RSA Archer Third-party Risk Management use case.

Additional Requirements:
• Demonstrated knowledge of process and operational workflows and research skills.
• Strong PC skills including working knowledge and proficiency with the primary Microsoft Office applications.
• Demonstrated knowledge of continuous improvement methodologies, tools, and techniques (data collection, process mapping, data analysis, etc.) for solutions.
• Analytical skills with the ability to collect, organize, evaluate, and disseminate significant amounts of information with attention to detail and accuracy.
• Demonstrated ability to effectively negotiate timeframes, commitments, and deliverables.
• Ability to translate data into clear, concise information that can be used to support business decisions.
• Ability to manage tasks independently and take ownership of responsibilities.
• Ability to adapt to a rapidly changing environment.
• Ability to organize and prioritize workload. •

Last updated on May 31, 2023