Apply on Employer Site

OnePay · 2 weeks ago

Third Party Risk Analyst

United States

Full-time

Remote

Senior Level

5+ years exp

OnePay is an all-in-one financial platform aiming to improve financial accessibility for unbanked and underbanked Americans. As a Third Party Risk Analyst, you will assess vendor risks, ensure compliance with security standards, and collaborate with various teams to mitigate potential threats to the organization.

Financial Services

Comp. & Benefits

Responsibilities

Conduct vendor risk reviews and evaluate third-party attestations such as SOC 2, ISO 2700x, and other security certifications

Analyze vendor contracts and identify potential risk clauses or data security implications

Support annual high-risk vendor audits and maintain documentation to meet compliance requirements

Collaborate cross-functionally with Legal, Procurement, Engineering, and Compliance teams to assess risk exposure and mitigation plans

Provide technical insight into vendor integrations, authentication, and infrastructure security controls

Qualification

Vendor risk managementSecurity frameworks knowledgeContract analysisInformation security experienceTechnical risk rolesAnalytical skillsDriveProactivityCommunication

Required

5–8+ years of experience in information security, vendor risk management, or related technical risk roles

Strong understanding of security frameworks and certifications (SOC 2, ISO 2700x, NIST, etc.)

Familiarity with authentication, disaster recovery, and infrastructure security concepts

Ability to interpret and challenge vendor-provided attestations and control summaries

Comfort reviewing contracts and identifying clauses impacting data handling or access control

Excellent communication and analytical skills, with the ability to ask critical questions and present findings clearly

Drive and proactivity – everyone here is a builder and executor

Company

OnePay

We believe the future of financial services is meeting consumers where they already are — in their daily lives, workplaces, and communities nationwide.

Founded in 2022

New York, NY, US

501-1000 employees