Associate Third-Party Risk Management (TPRM) Risk Analyst

Mongodb·United Statesmid

In short

→Analista de riesgo de terceros que aplica métodos cuantitativos para evaluar relaciones comerciales estándar.
→Dia a dia: revisa documentación, coordina con expertos, mantiene registros y sigue remediaciones en sistemas como Jira y Graphite Connect.
→Destacado: trabaja con metodología basada en fórmulas para asignar niveles de riesgo crítico, con enfoque en precisión y cumplimiento auditado.

Proficiency in written and spoken English required

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

🎧Land the interview? Bring the copilot. Our free extension listens to the live interview and flashes 3-4-word anchors from your resume and prep — glance, connect, talk. Get the extension →

What they ask for

✓3-5 años en TPRM o GRC
✓Experiencia en evaluaciones de riesgo con metodologías cuantitativas
✓Titulación en ciberseguridad, negocios o sistemas de información
✓Capacidad para interpretar datos de intake en plataformas TPRM
✓Habilidades para coordinar con expertos (SMEs) y rastrear respuestas
✓Conocimiento práctico de sistemas como Jira y Graphite Connect

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

Graphite ConnectJiraTPRM platformformula-based risk methodologyrisk assessmentaudit-readinessrisk triggersSME reviewsremediation trackingdata-quality checks

Who should you write to at Mongodb?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

The key objectives of the TPRM Program are to: • Assess the risk of third-party relationships which drive the rigor of risk management activities both during the third-party onboarding and ongoing monitoring lifecycle phases using the TPRM Program’s formula-based risk methodology; • Act as a liaison across key internal stakeholder teams (Procurement, Legal, Enterprise Security and the Business) to ensure clear and accurate communication of third-party risks aligned to risk management activities in order to complete risk assessments in a timely manner; • Identify TPRM program enhancements aimed at the effective and efficient management of third-party risk in order to support Business strategic initiatives. Reporting to the TPRM Manager and working closely with the TPRM Risk Analyst, the Associate TPRM Risk Analyst will support day-to-day execution of the third-party risk lifecycle. This is a support-oriented analyst role focused on applying established TPRM procedures and risk methodology to standard engagements, maintaining complete and accurate assessment records, coordinating routine stakeholder activity, and escalating issues that require additional judgment. Responsibilities: Risk Intake & Assessment Methodology • Apply the TPRM Program’s formula-based inherent risk methodology and assign Criticality designations for standard third-party relationships, documenting the inputs, rationale, and supporting evidence • Perform completeness and consistency checks on intake information, risk calculations, and assessment records; identify missing, inconsistent, or unclear information and escalate exceptions in accordance with defined thresholds. Documentation Analysis & SME Coordination • Gather, organize, and maintain third-party-provided information and documentation in accordance with TPRM assessment methodology and audit-readiness expectations. • Identify and route required SME reviews using defined risk triggers, track responses, and document completed SME assessments and supporting evidence. • Maintain accurate and timely records in Graphite Connect, Jira, and other approved systems of record. Risk Review Support • Support execution of third-party risk assessment remediation of identified gaps or findings based on defined risk triggers to obtain complete responses and supporting documentation. • Support routine communication with third parties to resolve identified gaps, with primary responsibility for Medium-Risk and Low-Risk remediation activities. • Track remediation actions, due dates, and supporting evidence; escalate High Risk, Critical, overdue, or otherwise judgment-intensive gaps. • Support the third-party periodic review process, including leading communication to third parties to remediate identified gaps; escalate any gaps. Status Reporting • Compile assessment-level data, SME review status, remediation activity, and other required information to support standard status and portfolio reporting. • Perform data-quality checks and identify field-level trends, recurring documentation gaps, or process issues for review. • Prepare routine status updates and supporting materials for internal stakeholder discussions. Requirements: Experience & Education: • 3-5 years of experience in Third-Party Risk Management (TPRM) or Governance, Risk & Compliance (GRC) • Demonstrated experience performing substantive risk assessments and applying formula-based or quantitative risk methodologies • Bachelor’s degree in a relevant field (Cybersecurity, Business, Information Systems). Technical & Operational Proficiency: • Proficiency with a TPRM platform, including the ability to interpret intake data, Data Level cla

Looking for something similar?

Leave your email and we'll alert you when matching jobs appear.

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.