Third Party Risk Associate

Allegis Group•Hanover, MD

65d•Onsite

About The Position

The Third Party Risk Associate will support the Third Party Risk Management (TPRM) team in conducting third party due diligence, vetting proposed business partners, and identifying third party related risk for the global enterprise. In this role, you will use foundational understanding of cybersecurity controls and privacy best practices as it relates to third party partners. The Third Party Risk Associate will partner with the business to understand third party (including technology, professional services, strategic partners, etc. third parties) use cases and conduct relevant and risk-based due diligence to develop risk assessments. The Third Party Risk Associate will audit the team's documentation for compliance with policy and procedures and maintain up to date information within the third-party risk application.

Requirements

Bachelor's degree in Business Administration, Management, Risk, IT, Cybersecurity, Procurement, or related field
0-3 years of work experience
Must have excellent verbal and written communication skills
Ability to issue spot real time
Interpersonal skills
Must be highly organized and detail oriented
MS Office and Excel experience
Analytical and problem solving skills
Continuous drive towards process improvement and efficiency
Must have intellectual curiosity

Responsibilities

Use a risk-based approach when evaluating third parties
With leader support, be able to articulate and explain third party's potential risk to business stakeholders
Communicate effectively identified risks and escalate as necessary
Complete annual reviews based on the risk assessment findings and the risk matrix
Escalate changes in use case to leader to determine if any additional due diligence is required
Build relationships with strategic partners and Subject Matter Experts
Audit the TPRM process and refine the process based on feedback from partners
Manage the annual review report
Track risks and remediations through the Risk Register
Ability to understand third party risk terms as it relates to Cybersecurity, Privacy, and AI
Complete compliance/sanction screenings for customer and client requests
Provide a description of risks to customers that is easily digestible and impactful
Create SOPs to document TPRM processes

Benefits

Medical, dental & vision
Hospital plans
401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
Life Insurance (Company paid Basic Life and AD&D as well as voluntary Life & AD&D for the employee and dependents)
Company paid Short and long-term disability
Health & Dependent Care Spending Accounts (HSA & DCFSA)
Transportation benefits
Employee Assistance Program
Tuition Assistance
Time Off/Leave (PTO, Allegis Group Paid Family Leave, Parental Leave)