Third-Party Risk Analyst

• North America (Remote) (Remote)
• Posted on January 28, 2026

CastleHill Managed Risk Solutions CastleHill Managed Risk Solutions

Third-Party Risk Analyst

The Third-Party Risk Analyst will assist in executing the vendor management process at CastleHill Managed Risk Solutions. The analyst will also aid in establishing the Third-Party Risk rating process and assess risk through due diligence reviews. The Third-Party Risk Analyst will also perform ongoing monitoring and evaluation of Third-Party Risk, regularly working with various clients.

• Assess initial inherent and residual risk ratings on new vendors. Must be able to think analytically and critically to adjust risk assessment ratings as warranted through subjective determinations.
• Coordinate, execute, and review due diligence assessments on new vendors
• Utilize vendor management system(s) to document risk ratings on all vendors and perform the assessment process
• Develop positive working relationships with CastleHill clients and relationship managers to maintain an open environment for collaboration, solving issues, assessing risk and remediation when applicable
• Aid clients and relationship managers with ongoing documentation regarding vendor issues or non-compliance with contracts
• Coordinate annual vendor reviews with relationship managers and third-party respondents
• Maintain communication with Clients on identifiable risks and remediation plans

Critical Requirements for Success:

• Excellent organizational and interpersonal skills are an absolute must, along with strong written and verbal communication skills
• A college degree in technology, business, or related discipline is preferred. However, experience is sufficient for candidates with an appropriate mix of personality and skills
• Candidates with experience in Compliance, Audit, Vendor Management, or Third-Party Risk Management is desirable and will be prioritized
• Must be able to demonstrate the analytical and critical judgment required to evaluate documentation and develop mitigation requirements based on subjective information
• Must have a high level of communication skills and the ability to communicate at all levels of management
• Demonstrated interest in technology, formal technology training, and/or a background in Information Technology
• Proficient with Excel, Outlook, Word, PowerPoint

Desirable Certifications:

Certified Third-Party Risk Professional (CTPRP), CISA, and other technology-related certifications

Please email your resume to: [email protected]

To apply for this job email your details to [email protected]