Third-Party Risk Analyst

Third Party Risk Analyst

Responsibilities

• Manage multiple concurrent Risk Assessments for Solventum systems and products, coordinating with Architecture, Vulnerability Management, Sourcing, Legal, Procurement, Product Teams, and Business Teams.
• Perform security risk analyses and compliance assessments of third parties in accordance with industry best practices, delivering comprehensive, contextualized, and actionable information.
• Maintain the enterprise third-party inventory by ensuring data accuracy, completeness, and integrity; monitor and report on key inventory metrics and dashboards to support effective third-party risk management and governance activities.
• Develop strong working relationships with Sourcing, Procurement, Legal, Privacy, and other key stakeholders while maintaining a process-owner-focused approach.
• Build and leverage an extensive network of positive relationships across Solventum and its technology organizations to support the broad requirements of the role.
• Work independently with limited direction and guidance while effectively managing priorities.
• Understand complex enterprise vendor use cases and identify risks associated with authentication, data management, integrations, and other key security considerations.
• Provide risk-based recommendations and insights to support informed business decisions and strengthen third-party risk management practices.

Minimum Qualifications

• Bachelor's degree in computer science, Information Security, or equivalent and 7 years of relevant experience in Information Security/Risk

OR

• Demonstrated 3 years direct experience in third-party risk management with a large matrixed firm.
• An applicable certification such as in Risk (CRISC), Security (CISSP, CISM) or Audit (CISA).

Additional qualifications (Nice to have):

• 5 years direct experience in third party risk assessment in a private, public, government or military environment
• Experience working with third-party risk management and governance applications such as OneTrust, ServiceNow, Security Scorecard, RiskRecon, or similar platforms used for inventory management, risk assessments, monitoring, and reporting.
• Experience and proficiency working with data analytics tools used to evaluate and manage inventory such as Tableau, Power BI, etc

Work location: Hybrid

Travel: May include up to 20%

Relocation Assistance: Is not authorized.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.