Job Description

What We'll Bring: We are seeking a highly skilled and detail oriented Third Party Risk Management (TPRM) Risk Analyst to join our global TPRM team. This role is responsible for managing a regional portfolio of third party vendors, oversight of risk assessments, and supporting the implementation of our global TPRM framework. The ideal candidate will have a strong background in risk management, supplier management, knowledge of information security, and stakeholder engagement within complex, matrixed environments. This role will work closely with procurement, legal, compliance, information security and business stakeholders to ensure third-party vendors meet regulatory, operational, and strategic risk requirements.
What You'll Bring:
Key Responsibilities:

• Manage a regional portfolio of third-party vendors, ensuring compliance with internal policies and regulatory requirements.
• Support the development and implementation of TPRM risk management frameworks, policies, and procedures.
• Contribute to the creation and maintenance of standard operating procedures (SOPs) for TPRM risk management.
• Ensure TPRM activities align with internal controls, regulatory requirements, and industry best practices.

• Continuously monitor the risk landscape for changes in supplier status, geopolitical risks, regulatory updates, and market trends.
• Develop and maintain risk dashboards, heat maps, and scorecards for leadership visibility.

• Liaise and collaborate with business lines to understand third-party dependencies, risk exposure and align to ensure a coordinated approach to TPRM oversight.
• Provide consultative support to business units on TPRM-related matters.
• Act as a subject matter expert on TPRM risk, providing guidance and training to internal teams.

• Utilize and help optimize Third Party Risk Management platform ensuring efficiencies across various tools. (e.g. Coupa, RiskRecon, IVRM, Onspring) and support the integration of risk scoring tools and automation into TPRM workflows.

Impact You'll Make:
Required Qualifications & Experience:

• Experience in Third Party Risk Management, supply chain, or risk management roles and managing a third-party risk portfolio
• Strong communication, presentation, and stakeholder management skills.
• Demonstrated ability to complete complex processes with minimal supervision.
• Proven ability to assess and evaluate risks, translating technical findings into clear, actionable business terms.
• Hands-on experience with GRC frameworks, risk assessment methodologies and practices, ensuring alignment with organizational objectives and regulatory requirements.
• Experience in policy development and delivering training materials.
• Proficient in Microsoft Excel and PowerPoint, with experience in creating detailed reports and presentations for diverse audiences.
• Strong understanding of third-party risk management and procurement processes.
• Excellent analytical, communication, and stakeholder management skills

Preferred Qualifications:

• Experience implementing TPRM programs or frameworks.
• Previous consulting or program implementation.
• Familiarity with regulatory requirements and industry best practices.
• Experience working in regulated industries (e.g., financial services, healthcare).
• Hands-on experience with GRC systems (e.g., Onspring, Archer, One Trust).
• Relevant certifications (e.g., CIPS, CRISC, CRMP, CISSP, CISA).

This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.
TransUnion Job Title
Consultant, Governance Risk and Compliance

Skills Required