About the Role

We are seeking a Security Analyst to support the organization’s Third-Party Risk Management (TPRM ) program, with a primary focus on application and security architecture review s of external vendors and SaaS providers

This role sits at the intersection of security architecture, vendor assessment, and GRC reporti ng. The analyst will evaluate vendor-provided documentation, analyze cloud-based technology stacks, and produce structured security assessment outputs that feed directly into the GRC team’s formal risk reporting proces

s.
A key part of this role involves working with incomplete or unclear vendor documentat ion and performing independent research (including OSINT techniques) to accurately understand vendor architectures and security postu

re.
Key Responsibili

• tiesPerform detailed security architecture and application ...