5 third party risk analyst jobs at 5 companies in Laurel, MD
2d
Save
Mark Applied
Hide
Security Analyst, Third-Party Ecosystem Risk Management
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam or United States or Canada or United Kingdom or Europe
$119k-$176k/yr HybridFull Time
4+ YOERequires 4+ years in vendor risk management, third-party security assessments, risk lifecycle management, security frameworks, program maturation, documentation, communication, and AI-assisted tooling.
SOC 2, ISO 27001, NIST CSF, OneTrust, ProcessUnity, Whistic, SecurityScorecard
1mo
Save
Mark Applied
Hide
Senior Vendor Risk Analyst - Remote
Draper or Eden Prairie or Washington or New York City
$73k-$130k/yr RemoteFull Time
5+ YOE5+ years assessing third-party/vendor risk, familiarity with vendor risk management frameworks, ability to analyze financial statements, knowledge of ISO 27001, SIG, SOC 2; eGRC Archer experience preferred.
eGRC Archer, ISO 27001, SIG, SOC 2
1mo
Save
Mark Applied
Hide
Senior Cybersecurity Risk Analyst - USA Remote
Washington or Boston or Dallas or Chicago or Miami or Denver or Orange or Los Angeles or Las Vegas or Sacramento or Phoenix or San Diego or United States
$130k-$160k/yr RemoteFull Time
7+ YOE7+ years in third-party/vendor risk, enterprise risk, or vendor security; experience administering vendor questionnaires, reviewing SOC 2/ISO 27001 evidence, scoring at scale, reviewing cybersecurity contract provisions, and operating enterprise risk registers.
Shared Assessments SIG, NIST SP 800-161, ISO/IEC 27036, GDPR, HIPAA, PCI DSS, SOX, SOC 2, ISO 27001, NIST AI RMF, ISO/IEC 42001, OneTrust, ServiceNow IRM, RSA Archer
2w
Save
Mark Applied
Hide
Senior Information Security Risk Analyst
Washington, District of Columbia, United States
$103k-$191k/yr HybridFull Time
3+ YOEBS/BA required, 3+ years information security experience with at least 1 year in third‑party risk management; knowledge of network, access control and encryption; strong communication and analytical skills.
1w
Save
Mark Applied
Hide
SCRM/Emerging Technology Security Analyst
Washington, District of Columbia, United States
OnsiteContract
4+ YOEBachelor's degree or equivalent experience, 4+ years in cybersecurity, third-party/vendor risk, or compliance analysis, and experience producing security risk assessments and mitigation recommendations.
NIST SP 800-218, NIST AI Risk Management Framework and Playbook