Suncoast Credit Foundation
Overview
Compensation:
$60,000 - $90,000 based on experience and credentials
Location Type:
Remote (Candidate must reside in the state of FL)
Position Type:
Full Time
The Third-Party Risk Analyst supports the Third-Party Risk Management (TPRM) program by executing risk assessments, maintaining vendor profiles, and assisting with ongoing monitoring and reporting. The Analyst collaborates with business stakeholders, procurement, Information Security, Legal/OGC, Enterprise Risk Management (ERM), and Compliance to ensure vendor risks are identified, documented, and addressed per policy and regulatory expectations.
Responsibilities
Perform initial and periodic inherent/residual vendor risk assessments across security, privacy, operational, financial, and compliance domains
Issue and track standardized questionnaires and review SOC reports, ISO certifications, insurance certificates, privacy policies, and BC/DR plans
Maintain accurate vendor inventories, lifecycle statuses, findings, ratings, and remediation actions in the TPRM system of record
Support contract reviews by identifying standard risk clauses (SLAs, data protection, audit rights) and escalating gaps to the director
Monitor vendors using internal KPIs/KRIs and external data (financial health, adverse media); trigger re-assessments when thresholds are met
Prepare dashboards and evidence packages for audits, regulatory exams, and management committees
Coordinate with stakeholders to track remediation and verify closure of issues by due dates
Contribute to process documentation, playbooks, templates, and operational efficiency initiatives
Maintain knowledge and understanding of current trends, laws, and issues affecting the area of expertise
Complete annual compliance and info security training to understand employees' role in maintaining effective compliance and security programs
Attend educational events to increase professional knowledge
Qualifications
Bachelor’s degree in business, information systems, cybersecurity, risk management, or a related field (A comparable combination of work experience and training may be substituted for education requirements.)
Minimum of 1 year of experience in risk, compliance, vendor management, procurement, or audit
Working knowledge of risk frameworks (NIST CSF/800-53, ISO 27001, SOC 2) and industry regulations (e.g., GLBA, HIPAA, GDPR/CCPA)
Proficiency with Excel/Sheets; familiarity with GRC/TPRM tools (Archer, ServiceNow, OneTrust, Prevalent, ProcessUnity)
Strong analytical, writing, and documentation skills
Ability to maintain a high level of confidentiality
Experience with contracts, vendor SLAs, and financial services preferred
Ability to prioritize tasks by effectively managing competing and changing priorities to meet deadlines
Accurate, detail-oriented, and organized with task management
Ability to analyze and resolve difficult and often complex problems or situations
Strong written, verbal, and interpersonal communication skills to interact effectively with members, staff, vendors, and government regulators
Strong knowledge and understanding of credit union products, services, policies, and procedures
Strong knowledge and understanding of regulatory compliance
Strong knowledge and understanding of credit union computer systems and software applications required to perform job duties
Benefits
Financial Well-Being:
Bonus Program up to 12%, 401K Matching up to 8%, Retirement Planning, Pay Increases based on Competency, Employee Loan Discounts, Flex Spending Accounts
Wellness:
Medical Coverage, Dental and Vision Coverage, Access to 4,000+ Gyms, Mental Health Resources, PTO Wellness Days, Short Term and Long Term Disability Coverage
Work-Life Balance:
11 Paid Holidays, 3 weeks of Paid Time Off, 4 weeks of Paid Parental Leave, Birthday PTO
Community Involvement:
Paid Volunteer Hours
Growth:
Degree Assistance up to $5,000 per year
For more information, including additional benefits, please visit our benefits website at https://careers.suncoastcreditunion.com/benefits
#J-18808-Ljbffr
$60,000 - $90,000 based on experience and credentials
Location Type:
Remote (Candidate must reside in the state of FL)
Position Type:
Full Time
The Third-Party Risk Analyst supports the Third-Party Risk Management (TPRM) program by executing risk assessments, maintaining vendor profiles, and assisting with ongoing monitoring and reporting. The Analyst collaborates with business stakeholders, procurement, Information Security, Legal/OGC, Enterprise Risk Management (ERM), and Compliance to ensure vendor risks are identified, documented, and addressed per policy and regulatory expectations.
Responsibilities
Perform initial and periodic inherent/residual vendor risk assessments across security, privacy, operational, financial, and compliance domains
Issue and track standardized questionnaires and review SOC reports, ISO certifications, insurance certificates, privacy policies, and BC/DR plans
Maintain accurate vendor inventories, lifecycle statuses, findings, ratings, and remediation actions in the TPRM system of record
Support contract reviews by identifying standard risk clauses (SLAs, data protection, audit rights) and escalating gaps to the director
Monitor vendors using internal KPIs/KRIs and external data (financial health, adverse media); trigger re-assessments when thresholds are met
Prepare dashboards and evidence packages for audits, regulatory exams, and management committees
Coordinate with stakeholders to track remediation and verify closure of issues by due dates
Contribute to process documentation, playbooks, templates, and operational efficiency initiatives
Maintain knowledge and understanding of current trends, laws, and issues affecting the area of expertise
Complete annual compliance and info security training to understand employees' role in maintaining effective compliance and security programs
Attend educational events to increase professional knowledge
Qualifications
Bachelor’s degree in business, information systems, cybersecurity, risk management, or a related field (A comparable combination of work experience and training may be substituted for education requirements.)
Minimum of 1 year of experience in risk, compliance, vendor management, procurement, or audit
Working knowledge of risk frameworks (NIST CSF/800-53, ISO 27001, SOC 2) and industry regulations (e.g., GLBA, HIPAA, GDPR/CCPA)
Proficiency with Excel/Sheets; familiarity with GRC/TPRM tools (Archer, ServiceNow, OneTrust, Prevalent, ProcessUnity)
Strong analytical, writing, and documentation skills
Ability to maintain a high level of confidentiality
Experience with contracts, vendor SLAs, and financial services preferred
Ability to prioritize tasks by effectively managing competing and changing priorities to meet deadlines
Accurate, detail-oriented, and organized with task management
Ability to analyze and resolve difficult and often complex problems or situations
Strong written, verbal, and interpersonal communication skills to interact effectively with members, staff, vendors, and government regulators
Strong knowledge and understanding of credit union products, services, policies, and procedures
Strong knowledge and understanding of regulatory compliance
Strong knowledge and understanding of credit union computer systems and software applications required to perform job duties
Benefits
Financial Well-Being:
Bonus Program up to 12%, 401K Matching up to 8%, Retirement Planning, Pay Increases based on Competency, Employee Loan Discounts, Flex Spending Accounts
Wellness:
Medical Coverage, Dental and Vision Coverage, Access to 4,000+ Gyms, Mental Health Resources, PTO Wellness Days, Short Term and Long Term Disability Coverage
Work-Life Balance:
11 Paid Holidays, 3 weeks of Paid Time Off, 4 weeks of Paid Parental Leave, Birthday PTO
Community Involvement:
Paid Volunteer Hours
Growth:
Degree Assistance up to $5,000 per year
For more information, including additional benefits, please visit our benefits website at https://careers.suncoastcreditunion.com/benefits
#J-18808-Ljbffr