{"id":1253848,"url":"https://alion.io/job/percept-solutions-technology-risk-third-party-risk-analyst","title":"Technology Risk & Third-Party Risk Analyst","company":{"id":3802190,"name":"Percept Solutions","domain":"percept-solutions.com","url":"https://alion.io/company/percept-solutions","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":6000,"max":9000,"currency":"SGD","period":"month","gross":true,"usd_annual":84564},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-09-22T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-09-22T00:00:00Z","board_verified":false,"closed_at":null,"days_open":27,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":27},"description":"We are seeking a Technology Risk & Third-Party Risk Analyst to assess and manage the technology, information security, cybersecurity, and outsourcing risks associated with external vendors and service providers. The successful candidate will conduct vendor due diligence, security and control assessments, identify control gaps, and work with internal stakeholders and third parties to ensure risks are appropriately documented, monitored, and remediated.\nKey Responsibilities:\nConduct third-party and vendor risk assessments, including initial due diligence, periodic reviews, and ongoing monitoring.\nAssess vendors’ information security, cybersecurity, technology, cloud, data protection, business continuity, and outsourcing controls.\nReview security questionnaires, supporting documents, audit reports, certifications, policies, penetration-test reports, and other evidence provided by vendors.\nPerform control gap assessments and evaluate the adequacy and effectiveness of vendors’ risk-management controls.\nIdentify, document, and evaluate risks arising from third-party services, technology platforms, cloud environments, and outsourcing arrangements.\nPrepare clear assessment reports detailing identified risks, control gaps, recommendations, and remediation requirements.\nWork with vendors and internal stakeholders to develop and track remediation plans through to closure.\nEscalate material risks, overdue remediation actions, and control weaknesses to the relevant stakeholders and management.\nMaintain accurate third-party risk records, risk ratings, assessment results, supporting evidence, and remediation status.\nSupport the development and improvement of third-party risk-management policies, procedures, assessment methodologies, and reporting standards.\nCollaborate with Information Security, Technology Risk, Compliance, Procurement, Legal, Audit, and business teams.\nSupport regulatory reviews, internal audits, and external audits relating to third-party, outsourcing, technology, and cybersecurity risks.\nMonitor relevant regulatory and industry developments and incorporate applicable requirements into the assessment process.\nRequirements:\nRelevant experience in one or more of the following areas:\nThird-Party Risk Management\nVendor Risk Management or Vendor Due Diligence\nTechnology Risk\nInformation Security or Cybersecurity\nIT Risk, IT Controls, or IT Audit\nPractical experience conducting security assessments, control reviews, or control gap assessments.\nGood understanding of third-party, vendor, and outsourcing risk-management principles.\nFamiliarity with cybersecurity and cloud security risks and controls.\nAbility to evaluate control evidence, identify weaknesses, and recommend practical remediation measures.\nFamiliarity with the Monetary Authority of Singapore’s regulatory expectations and technology risk requirements is preferred.\nStrong analytical, problem-solving, documentation, and report-writing skills.\nStrong stakeholder-management and communication skills, with the ability to engage both technical and non-technical stakeholders.\nAbility to manage multiple assessments, priorities, and remediation activities simultaneously.\nHigh attention to detail and the ability to exercise sound risk-based judgement.\nPreferred Qualifications:\nDegree or diploma in Information Technology, Cybersecurity, Information Systems, Risk Management, Business, or a related discipline.\nRelevant certifications such as CISA, CISM, CRISC, CISSP, CCSP, ISO 27001, or equivalent would be advantageous.\nExperience within banking, financial services, insurance, or another regulated industry would be an advantage.\nKnowledge of recognised frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, CSA CCM, SOC 2, or COBIT would be beneficial.\nTo apply,simply click the \"Apply\" button or send your updated profile to  \nEA Licence No.:18S9405 / EA Reg. No.:R1330864\nPercept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.\n\nSkills\nThird Party Vendor Management, control weaknesses, Regulatory Compliance, Business Continuity, Risk Management, Liaising With Internal Stakeholders, Audit Reports, Cybersecurity, Standards Development, CISA, compliance evidence, Third Party Services, IT Security Operations, CISSP, Liaising With Vendors, CISM","description_format":"text","description_chars":4496,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-09-25T17:56:20Z"}],"visa":[],"liveness":{"score":47,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.733,"p_room":0.75,"age_days":27,"expected_fill_days":30,"reasons":["seen:27","velocity","win:late"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":84564,"is_top_pay":false},"html_url":"https://alion.io/job/percept-solutions-technology-risk-third-party-risk-analyst","json_url":"https://alion.io/job/percept-solutions-technology-risk-third-party-risk-analyst.json","meta":{"generated_at":"2026-10-19T23:50:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2597,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3802190},"rest":"https://alion.io/mcp/rest/get_company?id=3802190"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpercept-solutions-technology-risk-third-party-risk-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpercept-solutions-technology-risk-third-party-risk-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpercept-solutions-technology-risk-third-party-risk-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/percept-solutions-technology-risk-third-party-risk-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpercept-solutions-technology-risk-third-party-risk-analyst"}]}