Security Analyst II – Third Party Risk Management jobs in United States
cer-icon
Apply on Employer Site
company-logo

Playlist · 3 hours ago

Security Analyst II – Third Party Risk Management

Playlist is a company focused on fostering meaningful connections and enhancing wellness through technology. The Security Risk Analyst II role involves managing risks related to third-party relationships, conducting security assessments, and collaborating with various departments to ensure compliance and security standards are met.

Computer Software
check
H1B Sponsor Likelynote

Responsibilities

Manage third party risk management queues to include onboarding, periodic assessments, offboarding and due diligence requests to ensure appropriate actions are taken to engage or disengage third parties
Perform periodic security risk assessments and monitor the security posture of our existing third-party vendors
Implement enhancements to the TPRM Program, including recommendations on process, automation, and tools used for the TPRM Program’s processes, policies, standards, procedures, and tooling
Assign risk rankings of vendor and customer relationships by analyzing due diligence questionnaire responses and documentation
Partners with Procurement and Legal departments during contractual negotiations to provide consultation on security and privacy clauses included in third party agreements
Collaborates with our BISOs to advise Business Partners on the appropriate implementation of cyber security, procurement and legal controls for new third-party services, leveraging a combination of these controls and the Third Party's security and privacy programs to maintain our information security and privacy posture
Prepare security risk reports, dashboards, and operational review metrics (KRIs) or other metrics for continuous improvement and monitoring
Maintain the integrity of Playlist’s Customer Trust Center documentation and customer security requests
Manages any internal and external audit requests related to TPRM activities and other compliance requests as needed

Qualification

Third Party Risk ManagementCyber Security GovernanceRisk AssessmentIndustry CertificationsAnalytical SkillsCommunication SkillsInterpersonal SkillsTime ManagementProblem-Solving

Required

3-4 years of professional work experience in third party risk, enterprise risk, cyber security governance and/or related functions (such as IT Risk Management and IT Audit)
Demonstrate leadership skills, excellent interpersonal skills, and proven problem-solving ability
Strong knowledge of industry best practices for third party risk management
Relevant industry certifications (e.g. CISSP, CISM, CRISC, CISA)
Ability to provide excellent customer service to internal customers
Self-starter with the desire to ramp up quickly, collaborate, execute and propose alternative or creative solutions when necessary
Excellent time management, critical thinking, analytical and communication skills
Strong interpersonal skills, capable of interacting at all levels of the organization and with vendors
The ability to multitask and complete assignments within deadlines that may have short lead times
Strong collaboration skills
Detail-oriented, deadline-driven, self-directed and organized
Resourceful and can work well independently

Benefits

Bonus target
Full benefits package

Company

Playlist

twitter
company-logo
Playlist is the parent brand bringing together @mindbody, Booker, and @classpass.

H1B Sponsorship

Playlist has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (1)

Funding

Current Stage
Late Stage
Company data provided by crunchbase