Third Party Risk Analyst

Overview

Leverage your customer service skills, attention to detail, and basic understanding of cybersecurity and organizational security to support the Third Party Security Risk Management team. Your role will involve assisting with security assessments and policy reviews, ensuring that Esri’s security practices are clearly communicated and meet customer requirements. You will help coordinate the completion and timely delivery of customer security assessments, review security policies and contractual requirements, and collaborate with subject matter experts to ensure accuracy. Success in this role requires strong organizational skills, effective communication, a proactive approach, and the ability to manage multiple tasks with accuracy and professionalism.

Responsibilities

• Collaborate with security subject matter experts (SMEs), legal teams, and global business development staff to enhance and maintain systems and processes for Esri’s customer trust program
• Manage incoming customer security requests (such as assessments, questionnaires, policy reviews, penetration tests, documentation, and contract term reviews), prioritize tasks, and recommend appropriate courses of action
• Provide general administrative support for audits, including filing, data entry, tracking, and correspondence, while adhering to established processes and standards
• Facilitate communication between business, technology, and information security teams to validate questionnaire responses and fulfill general requests related to controls defined by Esri’s standards and policies
• Advise Esri staff on security and privacy requirements, consulting with SMEs when necessary, and maintain a comprehensive security knowledge base
• Serve as a point of contact for client and compliance audit inquiries, ensuring timely and accurate responses
• Manage and maintain a standardized library of responses for customer questionnaires, ensuring accuracy and consistency
• Collaborate with internal experts to update and refine responses as needed

Requirements

• 2+ years of professional experience including general IT/Business responsibilities, customer/third party interactions, Third Party Risk Management (TPRM), IT Security, contracts/legal, or similar
• Proven experience providing exceptional customer service
• Demonstrated experience developing or being a part of customer facing programs and/or cross functional business programs
• Strong ability to coordinate with technology team members for follow-up of implemented controls and support the collection and validation of evidence as part of the risk remediation process
• Experience influencing without authority, dealing with ambiguity, and balancing competing goals and objectives
• Understand business/IT security and risk management controls to include experience with governance risk and compliance (GRC) tools or processes
• Clear communication, strong collaboration, and finely tuned writing/editing skills
• Bachelor's in Information Systems, Computer Science, Business, or a related STEM degree

Recommended Qualifications

• Security + or equivalent security certification(s)
• Exposure to Esri technology, Esri project methodologies, and security topics
• Experience in supporting the completion of security or compliance reviews, Third Party or Customer Questionnaires and familiarity with Policy/Standard reviews
• Project management experience
• Demonstrated success with business relations in a service-oriented business environment
• Proficient with Salesforce, content management or Third-Party Questionnaires related software like (Loopio)
• Familiarity with third party risk management platforms, such as CyberGRX
• SANS or equivalent security certification(s)

#LI-TM1

#LI-Hybrid