Third Party Risk Analyst

Be the one building AI-powered experiences where they matter most. At Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data and AI to help organizations deliver more personalized service, improve operational efficiency and build stronger customer relationships. Help build, support and operate technology used by more than 8,000 organizations in over 100 countries – moving AI from possibility to production in real-world enterprise environments every day.

Overview The Third-Party Risk Analyst is a key member of the Information Security team and reports directly to the Third-Party Risk Program Manager. This role is responsible for supporting the end-to-end Third-Party Risk Management (TPRM) lifecycle, including intake, due diligence, risk assessments, issue tracking, and ongoing monitoring.

Manage third-party risk management workflow, including reviewing new requests, tracking in-progress assessments, and driving assessments to completion. Conduct initial and ongoing third-party security risk assessments, including control evaluation, risk rating, and documentation of residual risk. Administer and maintain the third-party risk assessment tooling (UpGuard), including vendor onboarding, questionnaire distribution, response tracking, evidence collection, and workflow/status management. Review and validate third-party security and compliance artifacts (e.g., SOC 2 reports, ISO 27001 certificates, policies/standards, pen test summaries) and identify control gaps. Document findings, write clear risk narratives, and recommend remediation actions or compensating controls aligned to internal standards and risk appetite. Track remediation plans, validate closure evidence, and support reassessments/refresh cycles and ongoing monitoring activities. Contribute to continuous improvement of TPRM processes, templates, and playbooks Requirements Bachelor’s degree in information security, IT, Cybersecurity, or a related field. Minimum 2 years of related experience in information security, IT audit, risk, compliance, vendor management, or GRC preferred.

Strong critical thinking and analytical skills; able to interpret evidence and translate control gaps into clear risk statements. Detail-oriented with strong documentation discipline and comfort working in process-driven environments. Strong collaboration and stakeholder management skills; able to coordinate with diverse business unit. Ability to review and interpret complex vendor artifacts, including SOC reports, security questionnaires, and policies. Strong verbal and written communication skills. Ability to learn new tools quickly and operate effectively. #LI-PR1 #LI-Hybrid Working at Genesys AI at enterprise scale  – Build, support and operate AI-powered technology used by more than 8,000 organizations worldwide. 150+ new AI features were released in the last fiscal year. A flexible-first culture – Join a global team of nearly 7,000 employees with flexible ways of working designed to help people do their best work. Growth in the AI era – Build future-ready skills through mentorship, learning programs, leadership development and education support. Time to recharge and give back – Benefits include paid volunteer time, August Free Fridays, well-being resources and regionally tailored programs for employees and their families. Recognized globally – Genesys is Great Place to Work® certified in 17 countries and 94% of employees are proud to tell others they work at Genesys. Learn more about our culture, AI innovation and sustainability commitments through our Careers site and Sustainability Report. What Happens After You Apply After you apply, here's what you can typically expect: Our Talent Acquisition team reviews your application with the hiring team. A Talent Acquisition Partner will review your application and, if your background is aligned,