[Remote] Sr Third Party Risk Analyst (TPRM)

Note: The job is a remote job and is open to candidates in USA. HealthEquity is dedicated to saving and improving lives by empowering healthcare consumers. As a Senior Third Party Risk Analyst, you will ensure the security and integrity of partners and technologies while evolving the Third Party Risk Management program in a fast-paced environment.

Responsibilities

• Conduct risk assessments for critical and operationally significant third‑party entities, including cloud service providers, SaaS platforms, technology partners, and infrastructure providers
• Identify, track, and drive remediation of control gaps and security risks uncovered throughout the assessment lifecycle
• Stay ahead of emerging risks, including generative and agentic AI, and evolving regulatory expectations across financial services and healthcare
• Partner closely with cross‑functional teams such as Procurement, Legal, Privacy, Security, AI Governance, and vendor business owners to manage third‑party risk holistically
• Develop and maintain key risk and performance metrics that demonstrate progress and maturity within the TPRM program
• Lead efforts to automate repetitive and high‑volume processes, leveraging advancements in AI to increase efficiency, quality, and speed
• Introduce and evaluate AI‑enabled tools to enhance risk clarity, improve signal‑to‑noise, and scale the program responsibly
• Support other TPRM and governance activities as needed, contributing to a culture of continuous improvement

Skills

• Bachelor's degree in Computer Science, Information Technology, Risk Management, or a related technical field
• 5+ years of combined experience in information security, cybersecurity, or technical/analytical roles
• Experience operating in fast‑paced, high‑accountability environments where prioritization and time sensitivity matter
• 2–5 years of hands‑on cybersecurity experience, ideally within financial services or healthcare
• Strong understanding of security and AI control frameworks, such as: NIST Cybersecurity Framework (CSF), NIST AI Risk Management Framework (AI RMF), ISO 42001
• Prior experience with TPRM / GRC platforms, including tools such as Vanta, Archer, or ServiceNow
• Familiarity with cybersecurity risk rating services (e.g., RiskRecon, SecurityScorecard, BitSight)
• Working knowledge of audits, regulatory exams, and attestations, including SOC 2 Type II, ISO 27001, HITRUST, and similar frameworks
• Ability to review and interpret technical evidence demonstrating cybersecurity validation and compliance (e.g., SCA, SAST, DAST, penetration testing)
• Excellent written and verbal communication skills, with the ability to translate between technical and non‑technical audiences
• Experience reviewing technical policies and contributing to standard operating procedures
• Strong command of the Microsoft ecosystem, including PowerPoint, Excel, Word, SharePoint, and Power BI
• Demonstrated ability to use AI solutions securely and effectively, such as Microsoft Copilot, Gemini, Anthropic, or ChatGPT, to improve workflows and outcomes
• One or more cybersecurity certifications, such as CISSP, CISA, CISM, CRISC, or equivalent
• Demonstrated understanding of cybersecurity and AI governance frameworks, including NIST CSF and NIST AI RMF

Benefits

• Performance-based incentives as part of the total compensation package
• Medical, dental, and vision
• HSA contribution and match
• Dependent care FSA match
• Uncapped paid time off
• Paid parental leave
• 401(k) match
• Personal and healthcare financial literacy programs
• Ongoing education& tuition assistance
• Gym and fitness reimbursement
• Wellness program incentives
• HealthEquity covers all required travel and accommodations
• HealthEquity is committed to providing reasonable accommodations to team members with qualifying disabilities

Company Overview

Company H1B Sponsorship