Senior Analyst, Third-Party Risk Management

About the role

Checkout.com is looking for a highly skilled and proactive Senior Analyst, Third-Party Risk Management (TPRM), to join its growing global team. The role protects the business by conducting due diligence and risk assessments on external suppliers, working closely with experienced TPRM colleagues and reporting to the TPRM Manager.

Key responsibilities

• Conduct end-to-end third-party risk assessments, minimum due diligence and control evaluations.
• Review vendor compliance documentation such as control reports, certifications and security policies to validate cybersecurity and operational resilience.
• Identify control gaps in vendor environments and work with vendors to agree and track remediation actions.
• Manage an active pipeline of vendor assessments so they are completed efficiently, accurately and within agreed service levels.
• Act as a point of contact for internal business owners and Procurement, guiding them through the TPRM process and escalating complex risks to SMEs or senior team members.
• Support the team's strategic initiatives, including using AI and automation tools, executing system migrations and maintaining data hygiene.
• Take part in agile, ad hoc risk management projects as they arise.

Required profile

• 3+ years of proven experience in Third-Party Risk Management, IT Risk, IT Audit or a closely related Information Security Governance role.
• Knowledge of global security and risk frameworks, including ISO standards and SOC reporting, and a foundation in TPRM methodologies, cybersecurity principles and data privacy regulations.
• Highly organized, able to manage concurrent workloads and deliver promptly.
• Proactive collaborator who shares knowledge and supports team objectives.
• Excellent written and verbal communication, able to explain complex technical or compliance concepts simply to business stakeholders.
• Analytical, with a track record of supporting process standardization and adapting to changing regulations.

Required skills

• Experience with, or strong aptitude for, using AI and automation to optimize risk assessment workflows and scale TPRM operations.

What we offer

• A hybrid working model with three days per week in the office.
• Work that makes a difference from day one, with real ownership and fewer blockers.