Third-Party Risk Analyst

CONTEXT

In a financial ecosystem where digital transformation races ahead, our client, a major player in its sector, has woven a vast web of third-party providers into the fabric of its operations. From cloud platforms that host sensitive data to specialized vendors that power critical business services, every external partnership brings innovation—and a new surface for cyber and operational risk. The organization has therefore launched a strategic initiative to strengthen its third-party risk management framework, ensuring that every vendor relationship is assessed, negotiated, and monitored with the same rigor as internal systems. This role sits at the heart of that initiative, acting as the bridge between business ambitions, legal agreements, security requirements, and regulators’ expectations.

ACTIVITIES

As a Third-Party Risk Analyst, you will evaluate cybersecurity and operational risks linked to third-party services, with a special focus on cloud-based solutions. You will conduct in-depth risk assessments, review security postures, and challenge vendor responses to uncover hidden exposures. You will support contract negotiations by translating technical and security requirements into clear contractual clauses. You will coordinate audits and assessments with internal audit teams and external providers, ensuring findings are tracked to closure. You will maintain continuous monitoring of third-party risk indicators, watch for changes in vendor security posture, and escalate material issues. You will collaborate daily with procurement, legal, IT, information security, and business stakeholders to ensure compliance with IT and Information Security policies. You will also contribute to the evolution of risk assessment methodologies, templates, and reporting dashboards.

EXPECTED ACHIEVEMENTS

Your work will directly reduce the likelihood and impact of third-party cyber incidents, protecting the organization’s data, reputation, and operational resilience. You will help negotiate stronger contracts that embed security and compliance obligations from the start. By coordinating audits and continuous monitoring, you will create a transparent, repeatable, and auditable risk process. Stakeholders will rely on your assessments to make informed decisions about onboarding, renewing, or terminating vendor relationships. Ultimately, you will strengthen the organization’s ability to meet regulatory expectations and maintain trust with customers, partners, and supervisory bodies.

ENVIRONMENT

You will operate in a dynamic, multi-stakeholder environment that blends cybersecurity, risk management, procurement, and legal expertise. The team uses established IT and Information Security policies as its compass, along with risk assessment frameworks, cloud security benchmarks, and vendor risk platforms. You will interact with contract management tools, audit coordination trackers, continuous monitoring dashboards, and reporting suites. Methodologically, the role requires strong analytical thinking, structured communication, and the ability to translate technical risk into business language. You will work closely with internal and external partners, navigating both strategic discussions and operational details.