TPRM Analyst

The TPRM Analyst will support the execution of Third-Party Risk Assessments by performing vendor assessments, evidence reviews, risk scoring, and documentation in line with approved TPRA frameworks.

This role is execution-focused and supports high-volume assessments under defined timelines, working under the guidance of the TPRM Lead and Manager.

Key Responsibilities

Third-Party Risk Assessment Execution

• Perform initial and ongoing third-party risk assessments using defined templates and questionnaires.
• Review vendor-submitted documentation (policies, certifications, evidence).
• Identify control gaps and assign preliminary risk ratings based on impact and likelihood.
• Populate assessment outputs into centralized registers and tracking tools.

Vendor & Information Coordination

• Coordinate with internal teams (via Manager/Lead/Bilingual Analyst) for clarification on assessment scope.
• Track vendor responses, follow-ups, and pending submissions.
• Ensure completeness and accuracy of assessment inputs.

Risk Register & Documentation

• Maintain up-to-date risk registers including risk description, category, severity, and treatment recommendations.
• Support preparation of assessment reports, dashboards, and summaries.
• Ensure all documentation is audit-ready and version controlled.

Compliance Alignment

• Execute assessments aligned withDESC ISR, ISO 27001, ISO 27036, and internal control requirements.
• Follow standard operating procedures, scoring models, and escalation protocols.
• Support reassessments and onboarding assessments for new vendors.