Junior Analyst, Third-Party Risk Management

Job not on LinkedIn

🕒 5 days ago

🗽 New York – Remote

🗽 New York – Remote

⏰ Full Time

🟢 Junior

🧐 Business Analyst

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

National Trust

WebsiteLinkedInAll Job Openings

10,000+ employees

🤲 Charity

🏨 Hospitality

🛒 Retail

Charity • Hospitality • Retail

National Trust is Europe’s largest conservation organisation and a registered charity that protects and opens historic houses, gardens, parks, countryside and cultural heritage across England, Wales and Northern Ireland. It operates a wide range of visitor services — including food & beverage, retail, holidays, visitor experience and educational programming — and runs estate management, conservation, fundraising, volunteer and apprenticeship programmes to care for places and engage millions of visitors each year.

📋 Description

• Support its Third-Party Risk Management program within a highly regulated banking environment. • Conduct initial and ongoing risk assessments for new and existing vendors, with emphasis on cybersecurity and data protection. • Evaluate vendor due diligence responses, including information security, security architecture, and cloud environments. • Identify control gaps and recommend risk mitigation strategies. • Assess vendors handling sensitive data, critical systems, or customer information. • Support vendor due diligence, concentration risk, fourth-party risk, and business continuity assessments. • Assist with preparation for regulatory examinations and internal audits. • Maintain documentation demonstrating regulatory compliance and risk-based decision making. • Support updates to TPRM policies, procedures, and standards. • Assess vendor security programs against recognized frameworks, including: NIST Cybersecurity Framework, ISO 27001, SOC 2 Type II. • Support monitoring of critical and high-risk vendors. • Track vendor performance, compliance, and remediation activities. • Prepare risk summaries and reporting materials for leadership. • Escalate significant risks in a timely manner. • Review vendor incident response and breach notification processes. • Evaluate business continuity and disaster recovery capabilities. • Prepare concise risk reports for senior leadership and risk committees. • Maintain accurate documentation within the TPRM system. • Partner with Information Security, Compliance, Legal, Procurement, and business units.

🎯 Requirements

• Bachelor's degree in business, Information Security, Cybersecurity, Risk Management, Finance, or related field. • 1-3 years of experience in TPRM and Information security risk • Experience working in an OCC-regulated financial institution (preferred) • Exposure to cloud risk management (AWS, SaaS environments) (preferred) • Experience using TPRM platforms (preferred) • Working Knowledge of Risk assessment methodologies (inherent vs. residual risk) • NIST Cybersecurity Framework • ISO 27001 • SOC 2 reports

🏖️ Benefits

• Medical, Dental, and Vision insurance • 401(k) • life and disability insurance