Senior Third-Party Risk Management Analyst

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🧐 Business Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Momentive Software

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🤝 B2B

🤝 Non-profit

B2B • Non-profit • Software

Momentive Software is a provider of a comprehensive suite of software solutions tailored for nonprofits and associations. The company aims to streamline operations, enhance member and donor engagement, and drive impactful results for mission-driven organizations. Their offerings include tools for association management, fundraising, event management, learning management, and data analytics, allowing organizations to efficiently manage their financials and foster deeper community connections.

📋 Description

• Maintain Momentive's global inventory of third-party providers, applications, and services from onboarding through termination • Lead vendor cybersecurity assessments and coordinate with Cybersecurity Engineering, Legal, and business owners • Assess vendor maturity using NIST CSF, CIS, CMMC, GDPR, PCI DSS, SOC 2, and other frameworks • Oversee vendor SLAs, RPO/RTO commitments, breach notification requirements, and cybersecurity insurance documentation • Document findings, recommendations, and remediation plans for vendor assessments • Liaise with internal and external auditors on vendor-related controls and evidence collection • Provide evidence, documentation, and control validation for SOC 2 Type II and PCI DSS assessments • Ensure vendor controls align with Momentive's ISMS, contractual obligations, and certification requirements • Maintain audit-ready policies, standards, procedures, and risk treatment plans • Track vendor exceptions and compensating controls • Support vulnerability notifications to clients who manage their own cybersecurity controls • Provide consultative guidance regarding risk impact, remediation expectations, and recommended cybersecurity practices • Maintain documentation and metrics related to client notifications, follow-up actions, and closure • Contribute to continual improvement of Momentive's ISMS and cybersecurity controls • Support DR/BCP planning related to vendor dependencies and resiliency requirements • Coordinate with Legal, Cybersecurity, and leadership on vendor-related risk reduction strategies • Promote enterprise-wide cybersecurity culture through outreach, training, and awareness activities • Provide service to internal and external stakeholders • Mentor team members and contribute to internal training materials and documentation

🎯 Requirements

• 5+ years of experience in cybersecurity, risk management, audit, or compliance • Deep understanding of regulatory requirements including PCI DSS, SOC 2, GDPR, GLBA, HIPAA, SOX, and HITRUST • Experience evaluating both legacy and modern cloud technologies (AWS, GCP, Azure) • Strong knowledge of APIs, application cybersecurity, encryption, endpoint, and network cybersecurity concepts • Familiarity with SIEM, IDS, log management, vulnerability management, and threat intelligence • Ability to assess vendor controls, map them to frameworks, and articulate risk to non-technical stakeholders • Strong project management, multitasking, and organizational skills • Excellent written and verbal communication skills • Experience supporting SOC 2 Type II and PCI DSS audits • Experience with EGRC/ITGRC platforms (e.g., Jira Service Manager GRC, Archer, OneTrust, LogicGate) • Certifications such as CISSP, CISM, CISA, CRISC, CTPRA, or CTPRP • Eligibility to work in the United States without sponsorship • Minimum age of 18

🏖️ Benefits

• Medical, Dental & Vision Benefits • 401(k) Savings Plan with Company Match • Flexible Planned Paid Time Off • Generous Sick Leave • Inclusive & Welcoming Environment • Purpose-Driven Culture • Work-Life Balance • Commitment to Community Involvement • Employer-Paid Parental Leave • Employer-Paid Short-Term Disability • Remote Work Flexibility