Third Party Risk Management (TPRM) Analyst (Remote)

About this role

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role: CrowdStrike is seeking a Third Party Risk Management (TPRM) Analyst to join our Policy, Risk Management, and Controls team (PCRM). As CrowdStrike's ecosystem of vendors, partners, and suppliers continues to grow, this role will be essential in identifying, assessing, and managing the security risks introduced through third-party relationships. This role offers candidates an opportunity to work in a fast-paced, collaborative environment alongside experienced security professionals, with direct impact on protecting CrowdStrike and its customers from supply chain and vendor-related threats.

Third Party Risk Program Management:   Develop, implement, and maintain CrowdStrike's TPRM policies, standards, and procedures, ensuring alignment with internal security requirements and external regulatory obligations. Risk Assessment & Due Diligence: Lead security risk assessments of third-party vendors and partners across the full vendor lifecycle, from onboarding through offboarding,  identifying and prioritizing risks based on criticality and data access.

Reporting and Analysis: Generate detailed reports and dashboards to track vendor risk posture, assessment status, remediation progress, and program KPIs for leadership and key stakeholders. Collaboration and Resolution: Partner with Procurement, Legal, Privacy, IT, and business teams to ensure third-party risks are understood, communicated, and appropriately addressed. Serve as a subject matter expert on vendor security requirements.

Process Optimization: Continuously identify opportunities to streamline and automate TPRM workflows, reduce manual effort, and scale the program to meet CrowdStrike's growth.

What You'll Do: • Manage and mature CrowdStrike's Third Party Risk Management program, including policies, standards, procedures, and assessment methodologies.

• Conduct security risk assessments of third-party vendors, evaluating controls across domains such as data security, access management, incident response, business continuity, and compliance.

• Tier and prioritize vendors based on risk factors including data sensitivity, operational dependency, and regulatory scope.

• Manage vendor risk findings, remediation plans, and exceptions, working with vendors and internal stakeholders to resolve issues in a timely manner.

• Monitor the third-party risk landscape, including emerging threats, regulatory changes, and vendor security incidents, and communicate relevant updates to stakeholders.

• Develop and maintain TPRM dashboards and reporting to provide visibility into vendor risk posture and program health.

• Develop and deliver training and communications to internal stakeholders on TPRM processes, requirements, and responsibilities.

• Identify opportunities to automate and optimize TPRM workflows, leveraging GRC tooling and integrations to improve efficiency and scalability.

• Proactively identify gaps in the TPRM program and lead efforts to address and remediate them.

• Perform other duties within the scope of Third Party Risk Management and broader Cyber GRC.

What You’ll Need: • Bachelor's degree in Computer Science, Information Security, Business, or a related field; or a up to 5 years of experience.

• Technical focus on third party risk management, vendor risk, supply chain security, or related disciplines.

• Experience with GRC or TPRM platforms such as ServiceNow, OneTrust, ProcessUnity, or similar tools.

• Strong understanding of security risk assessment methodologies and control frameworks applicable to third-party environments.

• Familiarity with regulatory requirements and frameworks such as SOC 1/SOC 2, ISO 27001/27002, NIST 800-53, CSA-CCM, GDPR, and PCI-DSS as they apply to vendor relationships.

• Experience with reviewing vendor security documentation, including SOC reports, penetration test results, and questionnaire responses.

• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Certifications (Preferred):  • CISSP, CISM, CRISC, or equivalent security certifications.

• Certifications specific to third party risk such as CTPRP (Certified Third Party Risk Professional) are a plus.

Soft Skills: • Ability to think strategically about supply chain and vendor risks and connect them to CrowdStrike's broader risk posture.

• Strong analytical and problem-solving skills to evaluate vendor controls, identify gaps, and prioritize remediation.

• Excellent communication skills with the ability to convey technical risk findings to non-technical stakeholders, including executives and procurement teams.

• Proven ability to build and maintai

Similar jobs

• Manager, Third Party Risk Management (Remote) — CrowdStrike · Remote
• Third Party Risk Manager — BMO · Chicago, IL
• Third-Party Risk Analyst — Openrouter · Remote
• Third Party Risk Manager, AVP — MUFG · Tempe, AZ | Tampa, FL
• Project Financial Analyst (Remote) — Myriad360 · Remote
• Third Party Risk Management, Assistant Vice President — MUFG · Tempe, AZ | Tampa, FL
• VP Financial Planning & Analysis (Remote) — Knowbe4 · Remote
• Risk Process Analyst — Bank of America · Charlotte | Plano