Advanced Risk & Compliance Analyst – Third Party Risk Management

What are the core duties of this role?

• Lead and mature our Third-Party Risk Management (TPRM) continuous monitoring program. 

• Proactivelyidentifying, assessing, and responding to ongoing third-party risk signals across vendors, suppliers, partners, and service providers.

• Design, implement, and own the continuous monitoring strategy for third-party risk across Relativity.

• Continuously evaluate and enhance monitoring coverage and effectiveness

• Identify, ingest, and analyze internal and external risk signals, including cyber posture, security events, operational resilience indicators, financial health, and regulatory findings

• Leverage automated monitoring tools and data sources to detect changes in third-party risk posture

• Triage third-party risk events anddetermineseverity, impact, and required actions

• Coordinate with Procurement, Legal, Calder7, and Senior Leadership on response plans

• Track remediation activities,validatecorrective actions, and manage risk exceptions

• Define and maintainKRIs, dashboards, and executive reportingfor third-party risk trends

Minimum qualifications: 

• Bachelor’s degree in Risk Management, Information Systems, Cybersecurity, Business, Law, or related field

• 3-6+ years of professional experiencein third-party risk management, vendor risk, enterprise risk, or compliance

• Demonstrated hands-on experience with third-party risk continuous monitoring 

• Experienceidentifying, analyzing, and responding to ongoing third-party risk signals (e.g., cyber posture changes, incidents, regulatory or operational events)

• Working knowledge of third-party risk domains, including information security, privacy, operational, and compliance risk

• Familiarity with risk and control frameworks, including ISO/IEC 27001/27018 and/or comparable frameworks (e.g., NIST 800-53, SOC 2)

• Experience supporting issue management, remediation tracking, and risk escalation for third-party risk

• Strong written and verbal communication skills, with the ability to clearly articulate risk to technical and non-technical stakeholders

• Ability to translate complex regulatory requirements into practical, scalable solutions

• Hybrid-working role (2+ days in office) 

Preferred qualifications:

• Experience working in a SaaS environmentoperatingona global scale

• Experience in the legal space and with a high understanding of e-discovery and litigation

• Relevant certifications (e.g., CTPRP,CTPRA,CompTIACySA+,CRISC, CISA,CISSP)

• Experience with continuous monitoring and risk intelligence tools (e.g., RiskRecon, BitSight,SecurityScorecard,Panorays,ProcessUnity,BlackKite, Safe Security)

• Experience in regulated orhighly complexenvironments

• Familiarity with cloud and critical third-party ecosystems