IT Third-Party Controls Analyst

🕒 September 3

🇺🇸 United States – Remote

💵 $82.5k - $118.3k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧐 Analyst

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Guild Mortgage

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1960

🏗️ Construction

💸 Finance

🏠 Real Estate

Construction • Finance • Real Estate

Guild Mortgage is a U. S. -based mortgage lender and loan servicer that provides a wide range of home financing products and services to consumers and business partners. The company offers purchase and refinance mortgages, including conventional, FHA, VA, USDA, jumbo, renovation, construction, reverse mortgages, HELOCs, and specialty programs and down-payment assistance. Guild Mortgage operates nationwide through local branches and loan officers, supports borrowers with servicing and online account management, and partners with builders, real estate agents, title agents, and correspondents.

📋 Description

• Serve as the IT General Controls contact for third-party technology relationships, including offshore staffing, SaaS/cloud providers, outsourced services, contractors, and staff augmentation • Document third-party due diligence and approval updates and keep third-party records current • Translate due diligence and risk assessment findings into operational control requirements before go-live • Own third-party engagement classification and setup before onboarding • Review third-party roles and access for job-function alignment and least privilege • Oversee access models, identity attributes, monitoring requirements, and controls for external users with elevated or internal-like access • Coordinate periodic access certifications and timely access removal or adjustment • Monitor virtual desktop, third-party access, MFA, DLP, endpoint protection, and CASB/Zscaler controls • Track remediation of identity gaps, manual provisioning, over-provisioning, incomplete deprovisioning, and missing enhanced monitoring • Coordinate White Room setup and control validation for high-risk engagements • Manage third-party role and scope changes and communicate approved changes • Track control issues, gaps, and remediation activities from monitoring, incidents, or audits • Plan and facilitate third-party incident tabletop exercises • Own third-party incident escalation and reporting through resolution • Prepare periodic third-party risk reporting for Governance Committees, including metrics, evidence, KRIs, open issues, and remediation status • Support third-party BCP and DR planning and annual testing • Support audits and regulatory examinations by providing documentation, evidence, and walkthrough support • Monitor third-party offboarding and exit controls, including removal of system and physical access and closure of contractual and data obligations • Support third-party oversight, governance, risk classification, location reviews, contract management, and engagement intake • Maintain the third-party control library, process flows, procedures, and control narratives • Produce specialized assessment reports and other third-party process and communications deliverables • Advise the IT General Controls Manager and liaise with IT Governance, Vendor Management, Corporate Initiatives, IT Operations, Information Security, HR, Legal, Compliance, and other stakeholders • Support compliance with applicable regulatory requirements • Champion awareness of third-party control requirements through training, presentations, and communications • Drive continuous improvement, customer service excellence, metrics, and KPIs for third-party control performance • Monitor industry best practices and recommend enhancements • Perform other duties as assigned

🎯 Requirements

• Bachelor’s degree in Business Administration, Information Technology, or a related field, or an equivalent combination of education and experience • Minimum Five Years of Experience in IT Operations, Security, Risk, Audit, Vendor/Third-Party Risk Management, and/or offshore/outsourced staffing program administration • Knowledge of access reviews, third-party/vendor risk management, and IT General Controls audits required • Experience supporting or coordinating offshore/outsourced staffing, SaaS/cloud vendors, or IT contractor programs strongly preferred • Ability to partner effectively with risk and governance functions, translating due diligence and risk assessment findings into operational controls • Technical Project Management and/or Business Analysis experience preferred • Demonstrated ability to analyze and manipulate data across various sources including Excel, CRMs, GRC platforms, and online repositories • Ability to create, improve, and maintain IT processes • Process modeling and procedure development experience preferred • Ability to interpret and explain complex IT systems, third-party relationships, and operations to varied audiences • Advanced proficiency in Microsoft Word, Excel, and PowerPoint required • Experience with GRC tools, vendor risk management platforms, project management tools, and IT asset-management platforms preferred • Understanding of systems development lifecycle and change management concepts • Understanding of financial institution governance and regulations including SSAE 16/18, FFIEC, and ISACA/COBIT • Excellent organization and time-management skills • Strong presentation and communication skills • Ability to summarize large amounts of information and data for executive audiences • Willingness to take ownership of processes, projects, and deliverables • Customer-focused and results-oriented • Ability to establish and meet critical deadlines • Ability to prioritize multiple activities and complex projects simultaneously • Strong research and problem-solving skills • Commitment to company values • Work is primarily sedentary; mobility in an office setting • Ability to operate standard office equipment and keyboards • Ability to accurately perceive, distinguish, and interpret visual and audio information • Travel: 5% or less • Ability to learn new tasks, remember processes, maintain focus, complete tasks independently, and make timely decisions • Work primarily performed Monday–Friday during the business week

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Life insurance • AD&D insurance • LTD insurance • 401(k) with employer match • Pleasant work environment • Competitive compensation • Equal Opportunity Employer