Risk Assessor- Third Party Risk

LPL Financial•Fort Mill, SC

1d•$79,825 - $132,973

About The Position

The Risk Assessor is responsible for performing third-party risk assessments and evaluating vendor control environments. This role supports the Third Party Risk Management (TPRM) program by identifying risks, documenting findings, and partnering with internal stakeholders and external vendors to ensure appropriate mitigation and compliance with regulatory standards.

Requirements

3–5 years of experience in third-party risk management, vendor risk, or information security within a regulated industry
Experience using governance, risk, and compliance (GRC) tools (e.g., OneTrust)
Working knowledge of risk and compliance frameworks such as ISO 27001, NIST, SOC reporting, or similar standards
Proficiency with Microsoft Office applications, including Excel, Word, PowerPoint, and SharePoint
Bachelor’s degree or equivalent combination of education and relevant work experience

Nice To Haves

Professional certifications related to third-party risk, information security, or compliance (e.g., CISA, CISM, CRISC)
Experience using continuous monitoring tools such as SecurityScorecard or BitSight
Experience supporting audits or regulatory reviews

Responsibilities

Perform third-party risk assessments using standardized questionnaires (e.g., SIG, CAIQ) and due diligence reviews
Analyze documentation including SOC reports, ISO certifications, and audit artifacts to evaluate control effectiveness
Identify and document security, compliance, and operational risks and translate findings into business impacts
Develop and track remediation plans in collaboration with vendors and internal stakeholders
Monitor vendor risk posture using risk scoring tools and ongoing monitoring processes
Support regulatory compliance by validating adherence to applicable laws, regulations, and internal policies
Partner with cross-functional teams including Legal, Procurement, IT, Compliance, and business units
Prepare reports and dashboards summarizing risk assessments and vendor risk posture
Support internal and external audits by providing documentation and program evidence
Contribute to the development and enhancement of third-party risk management policies, procedures, and tools
Maintain knowledge of industry frameworks and standards including ISO 27001, NIST, and SOC reporting
Manage multiple assessments and priorities in alignment with established service level agreements