Third Party Risk Management Analyst

VARITE•Lehi, UT

1d•Hybrid

About The Position

VARITE is seeking a Third Party Risk Management Analyst for a hybrid role in Lehi, Utah. The analyst will conduct risk reviews across the client’s third-party ecosystem and help deliver the Third Party Risk Management (TPRM) module as part of a Global Source to Pay transformation. The role includes organizing requirements, designing and testing future-state workflows, managing data migration strategy, assisting with third-party offboarding, and supporting risk acceptance and mitigation governance. The analyst will monitor mitigation activities, manage action and task queues, conduct quality control and audit checks, and help improve risk review and due diligence processes. The position also involves analyzing large datasets, reporting, ad-hoc project work, and contributing to process improvement. The role requires sound judgment, initiative, communication and relationship-building skills, and the ability to influence stakeholders and work through ambiguity. The position is a four-month contract with a possible extension. The listed pay rate is $90.00–$95.07 per hour on W-2. VARITE offers eligible employees medical, dental, and vision coverage, a company-sponsored retirement savings plan, and legal service plans.

Requirements

Bachelor’s degree in business, finance, or a related field.
2–5 years of experience in audit, risk management, or compliance.
Experience conducting audits, compliance reviews, or risk assessments, including ongoing monitoring of risk mitigation plans.
Understanding of risk principles, concepts, and best practices, including risk assessment methodologies and reporting processes.
Familiarity with the third-party risk management lifecycle.
Familiarity with TPRM and governance concepts.
Critical-thinking and problem-solving skills, including the ability to analyze complex risk issues and make decisions independently without management oversight.
Ability to prioritize independently and work on one’s own initiative in ambiguous situations.
Strong communication, interpersonal, and influencing skills.
Change-management capability and persistence in following through to closure.

Nice To Haves

Master’s degree.

Responsibilities

Conduct risk reviews and identify potential vulnerabilities across third-party risk domains.
Assist in delivering the TPRM module within the Global Source to Pay transformation, including organizing requirements and designing and testing future-state workflows.
Own the strategy for identifying and migrating data between business systems.
Assist with offboarding third parties that are no longer in use.
Support the risk acceptance and mitigation governance process.
Monitor completion of risk mitigation activities by vendors and business owners.
Own and manage action and task queues arising from risk management and mitigation activities.
Perform quality control and audit checks of the TPRM program and third-party or business-owner responses.
Provide input to optimize risk review and due diligence processes for efficiency and scale.
Review knowledge-base content, practice skills, and respond to coaching and constructive feedback to improve knowledge, skills, and performance.
Perform ad-hoc project work, including reporting and analyses.
Analyze large datasets and identify insights that support process improvements.
Prioritize work independently and structure and deliver business optimization projects.
Communicate project designs and operating models to influence partners and leadership.
Follow change initiatives through to completion.