Job Description

We're Hiring: Vendor Risk Analyst | Third-Party Risk Specialist

Employment Type: Full-Time

Level: Mid-Level to Senior

We are seeking a detail-oriented Vendor Risk Analyst | Third-Party Risk Specialist to assess, monitor, and manage risks associated with external vendors, suppliers, and service providers. This role focuses on third-party risk assessments, vendor compliance, due diligence, contract reviews, and risk mitigation strategies. The ideal candidate will have strong analytical skills and an understanding of vendor governance, regulatory requirements, and business risk management.

Key Responsibilities

• Conduct third-party risk assessments to identify potential operational, financial, cybersecurity, and compliance risks.

• Evaluate vendors and service providers before onboarding and throughout the business relationship.

• Review vendor documentation, security questionnaires, financial records, and compliance reports.

• Perform due diligence checks to assess vendor reliability, business practices, and risk exposure.

• Monitor vendor performance and identify changes that may affect risk levels or service delivery.

• Assess third-party compliance with internal policies, contractual obligations, and relevant regulations.

• Develop and maintain vendor risk profiles, assessment records, and risk registers.

• Recommend appropriate risk mitigation measures and corrective action plans.

• Collaborate with procurement, legal, compliance, finance, IT, and business departments.

• Support vendor audits, contract reviews, and periodic risk reassessments.

• Track outstanding vendor issues and follow up on remediation activities.

• Prepare risk reports and present assessment findings and recommendations to management.

Requirements

• Background in Risk Management, Business Administration, Finance, Accounting, Information Technology, or a related discipline.

• Understanding of third-party risk management, vendor governance, and supplier due diligence.

• Knowledge of operational risk, financial risk, cybersecurity risk, and compliance assessment practices.

• Familiarity with vendor assessment frameworks, risk registers, and internal control procedures.

• Ability to review contracts, audit reports, compliance documents, and vendor-related records.

• Understanding of relevant standards and frameworks such as ISO 27001, SOC 2, or NIST is an advantage.

• Familiarity with procurement systems, vendor management platforms, or risk assessment tools is beneficial.

• Strong analytical, research, documentation, and problem-solving skills.

• Excellent communication skills and the ability to coordinate with internal teams and external vendors.

• Diploma or Bachelor's degree in a relevant field is preferred. Professional certifications such as CTPRP, CRISC, CISA, or relevant risk management qualifications are an advantage.

What We Offer

• Opportunities to work on vendor governance and enterprise risk management projects.

• Exposure to third-party compliance, due diligence, and risk assessment practices.

• Collaboration with procurement, legal, finance, IT, and compliance professionals.

• Opportunities for professional development and industry-related certifications.

• Career progression into Senior Vendor Risk Analyst, Third-Party Risk Manager, or Enterprise Risk Manager roles.

• A professional and collaborative working environment.

• Competitive compensation and comprehensive benefits package.

Who Can Apply

• Currently residing in the UAE.

• Legally authorized to reside and work in the UAE.

• Tourist and visit visa holders are not eligible.