Senior Analyst - Third-Party Risk Management NC

iHeartMediaCurrent employees and contingent workers clickhere to apply and search by the Job Posting Title.The audio revolution is here and iHeart is leading it! iHeartMedia, the number one audio company in America , reaches 90% of Americans every month a monthly audience thats twice the size of any other audio company almost three times the size of the largest TV network and almost 4 times the size of the largest ad-supported music streaming service. In fact, we have : More #1 rated markets than the next two largest radio companies combined;Were the largest podcast publisher , with more monthly downloads than the second- and third-largest podcast publishers combined. Podcasting, the fastest-growing new media, today has more monthly users than streaming music services or Netflix;iHeart is the home of many of the countrys most popular and trusted on-air personalities and podcast influencers , who build important connections with hundreds of communities across America;We create and produce some of the most popular and well-known branded live music events in America, including the iHeartRadio Music Festival, the iHeartRadio Music Awards, the iHeartCountry Festival, iHeartRadio Fiesta Latina and the iHeartRadio Jingle Ball Tour;iHeartRadio is the #1 streaming radio digital service in America;Our social media footprint is 7 times larger than the next largest audio service; andWe have the only complete audio ad technology stack in the industry for all forms of audio , from on demand to broadcast radio, digital streaming radio and podcasting, which bring data, targeting and attribution to all forms of audio at an unparalleled scale. As a result, were able to combine our strong leadership position in audience reach, usage and ad tech with powerful tools and insights for our sales organizations to help them build success for their clients at a more efficient cost than any other option.Because we reach almost every community in America, were committed to providing a range of programming that reflects the diversity of the many communities we serve and our company reflects that same kind of diversity. Our company values stress collaboration, curiosity, welcoming dissent, accepting mistakes in the pursuit of new ideas, and respect for everyone.Only one company in America has the #1 position in everything audio : iHeartMedia!If youre excited about this role but dont feel your experience aligns perfectly with the job description, we encourage you to apply anyway. At iHeartMedia we are dedicated to building a diverse, inclusive, and authentic workplace and are looking for teammates passionate about what we do!What We Need : The Senior Analyst will play a strategic role in overseeing the organization's Third-Party Risk Management (TPRM) program. This senior-level position is responsible for conducting and managing comprehensive risk assessments, establishing, and maintaining risk frameworks, and ensuring that third-party vendors comply with security, legal, and regulatory requirements. The role involves leading cross-functional teams in identifying, assessing, and mitigating risks across various business processes, ensuring alignment with industry standards and regulations.What You'll Do : ResponsibilitiesOversee Third Party Risk Management (TPRM) : Lead the TPRM program by conducting thorough assessments of third-party vendors and service providers, ensuring they meet the organizations security and compliance standards, and tracking their risk posture over time.Collaboration with Internal Teams : Partner with internal teams such as IT, Legal, Procurement, Privacy and Information Security to ensure risks are identified, reported, and mitigated, and that third-party relationships are aligned with corporate governance policiesVendor Risk Management : Perform in-depth reviews of third-party vendor contracts, service level agreements (SLAs), and compliance documentation to ensure risk mitigation strategies are in place, including proper data protection, disaster recovery, and security control measures.Policy and Governance Development : Lead the creation and refinement of policies, procedures, and standards for TPRM and enterprise risk management to ensure they are up to date with industry best practices and regulatory requirements (e.g., SOX, HIPAA, GDPR, CCPA).Lead Third-party risk assessments and monitoring.TPRM Risk monitoring and status tracking.Collaboration on risk mitigation strategies.Regular reporting and risk analytics.Risk assessments for new and / or existing 3rd parties vendors projects and initiatives.Lead any inbound assessmentsSkill and Knowledge RequirementsCore SkillsActs responsibly with sensitive and confidential informationIs creative and resourceful as a problem solverConsistently demonstrates the drive to deliver successfully even under difficult timelinesHas strong analytical, methodical, investigative and auditing skillsKnows when to make practical rational decisions that reduce risk to iHM information and Information systemsGood written and verbal communications skillsGood technical writing skillsA critical logical thinker who is efficient and methodicalTechnical SkillsBackground in a security governance model such as NIST, ISO, and PCI.Experience in developing cybersecurity policies and proceduresFamiliarity with risk management frameworks.Familiarity with Asset ManagementAble to define and understand various lines of business and the relationship to cybersecurity roles, responsibilities, and risk management decisions.Familiarity with access control management and strategiesAble to manage vulnerability remediation through use of mitigation strategiesFamiliarity with security control assessments and proceduresAbility to perform audits of systems, software, and security controlsFamiliarity with administering a corporate security awareness training programExperience with vetting vendors and vendor managementFamiliarity with legal and regulatory compliance requirements.What You'll Need : What You'll Bring : Respect for others and a strong belief that others should do this in returnFull proficiency and understanding of job functionAbility to work independently with minimal guidanceIn-depth knowledge of key business drivers and how this impacts your teamExperience in team and project management for mid-sized projectsAbility to recognize and mitigate riskConfidence to solve complex problems using multiple sources of informationGrowth mindset and desire for continued knowledge sharing and learningUnderstanding of impact of your own decisionsAbility to identify new opportunities for continued improvement across businessComfort acting as a trusted advisor for colleagues with less experienceAbility to manage complex and confidential information and to influence others to build consensus across all levelsLocation : VIRTUAL, NCPosition Type : RegularTime Type : Full timePay Type : SalariedBenefits : iHeartMedias benefits offering is flexible and offers a variety of choices to meet the diverse needs of our changing workforce, including the following : Employer sponsored medical, dental and vision with a variety of coverage optionsCompany provided and supplemental life insurancePaid vacation and sick timePaid company holidays, including a floating holiday that enable our employees to celebrate the holiday of their choosingA Spirit day to encourage and allow our employees to more easily volunteer in their communityA 401K planEmployee Assistance Program (EAP) at no cost services include telephonic counseling sessions, consultation on legal and financial matters, emotional well-being, family and caregivingA range of additional voluntary programs, such as spending accounts, student loan refinancing, accident insurance and more!We are accepting applications for this role on an ongoing basis.The Company is an equal opportunity employer and will not tolerate discrimination in employment on the basis of race, color, age, sex, sexual orientation, gender identity or expression, religion, disability, ethnicity, national origin, marital status, protected veteran status, genetic information, or any other legally protected classification or status.Non-Compete will be required for certain positions and as allowed by law.Our organization participates in E-Verify. Clickhere to learn about E-Verify.

by Jobble