Third-Party Risk Analyst

Job Description:

Third Party Risk Analyst

3M Health Care is now Solventum

At Solventum, we enable better, smarter, safer healthcare to improve lives. As a new company with a long legacy of creating breakthrough solutions for our customers’ toughest challenges, we pioneer game-changing innovations at the intersection of health, material and data science that change patients' lives for the better while enabling healthcare professionals to perform at their best. Because people, and their wellbeing, are at the heart of every scientific advancement we pursue.

We partner closely with the brightest minds in healthcare to ensure that every solution we create melds the latest technology with compassion and empathy. Because at Solventum, we never stop solving for you.

The Impact You’ll Make in this Role

• Manage multiple concurrent Risk Assessments for Solventum systems and products, coordinating with Architecture, Vulnerability Management, Sourcing, Legal, Procurement, Product Teams, and Business Teams.
• Perform security risk analyses and compliance assessments of third parties in accordance with industry best practices, delivering comprehensive, contextualized, and actionable information.
• Maintain the enterprise third-party inventory by ensuring data accuracy, completeness, and integrity; monitor and report on key inventory metrics and dashboards to support effective third-party risk management and governance activities.
• Develop strong working relationships with Sourcing, Procurement, Legal, Privacy, and other key stakeholders while maintaining a process-owner-focused approach.
• Build and leverage an extensive network of positive relationships across Solventum and its technology organizations to support the broad requirements of the role.
• Work independently with limited direction and guidance while effectively managing priorities.
• Understand complex enterprise vendor use cases and identify risks associated with authentication, data management, integrations, and other key security considerations.
• Provide risk-based recommendations and insights to support informed business decisions and strengthen third-party risk management practices.

Your Skills and Expertise (Minimum Qualifications)

• Bachelor’s degree in computer science, Information Security, or equivalent and 7(seven) years of relevant experience in Information Security/Risk

OR

• Demonstrated 3 years direct experience in third-party risk management with a large matrixed firm.
• An applicable certification such as in Risk (CRISC), Security (CISSP, CISM) or Audit (CISA).

Additional qualifications (Nice to have):

• 5 years’ direct experience in third party risk assessment in a private, public, government or military environment
• Experience working with third-party risk management and governance applications such as OneTrust, ServiceNow, Security Scorecard, RiskRecon, or similar platforms used for inventory management, risk assessments, monitoring, and reporting.
• Experience and proficiency working with data analytics tools used to evaluate and manage inventory such as Tableau, Power BI, etc.

Work location:

• Hybrid

Travel: May include up to 20%

Relocation Assistance: Is not authorized.

Supporting Your Well-being

Solventum offers many programs to help you live your best life - both physically and financially. To ensure competitive pay and benefits, Solventum regularly benchmarks with other companies that are comparable in size and scope.

Diversity & Inclusion

(*) We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, gender, sexual orientation, age, civil status, disability, family status, or membership of the travelling community.

Solventum is committed to maintaining the highest standards of integrity and professionalism in our recruitment process. Applicants must remain alert to fraudulent job postings and recruitment schemes that falsely claim to represent Solventum and seek to exploit job seekers.

Please note that all email communications from Solventum regarding job opportunities with the company will be from an email with a domain of @solventum.com. Be wary of unsolicited emails or messages regarding Solventum job opportunities from emails with other email domains.

Please note: your application may not be considered if you do not provide your education and work history, either by: 1) uploading a resume, or 2) entering the information into the application fields directly.

Solventum Global Terms of Use and Privacy Statement

Carefully read these Terms of Use before using this website. Your access to and use of this website and application for a job at Solventum are conditioned on your acceptance and compliance with these terms.

Please access the linked document by clicking here. Before submitting your application you will be asked to confirm your agreement with the

terms.