Associate Third-Party Risk Management (TPRM) Risk Analyst
United States · Remote North America · USD 70,000-138,000 · 3-5 years experience · Full-time · Remote · Posted Sep 21, 2026
At a glance
- Experience
- 3-5 years experience
- Employment
- Full-time
- Workplace
- Remote
- Location
- United States · Remote North America
- Salary
- USD 70,000-138,000 · Base salary
About MongoDB
- MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the data platform for the AI era, enabling builders to create, transform, and disrupt industries with software. MongoDB’s unified data platform, the most widely available, globally distributed data platform on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud data platform and is available across AWS, Google Cloud, and Microsoft Azure.
- With offices worldwide and over 67,000 customers, including AI-native startups and approximately 75% of the Fortune 100, relying on MongoDB for their most important applications, we’re powering the next era of software.
- Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB.
- To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!
- MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.
- MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
About the role
- The Associate Third-Party Risk Management (TPRM) Risk Analyst supports the day-to-day execution of the third-party risk lifecycle.
- This role focuses on applying established TPRM procedures and risk methodology to standard engagements, maintaining assessment records, and coordinating stakeholder activity.
Responsibilities
- Apply the TPRM Program’s formula-based inherent risk methodology and assign Criticality designations for standard third-party relationships.
- Perform completeness and consistency checks on intake information, risk calculations, and assessment records.
- Gather, organize, and maintain third-party-provided information and documentation.
- Identify and route required SME reviews using defined risk triggers and track responses.
- Maintain accurate and timely records in Graphite Connect, Jira, and other approved systems.
- Support execution of third-party risk assessment remediation of identified gaps.
- Communicate with third parties to resolve identified gaps, focusing on Medium-Risk and Low-Risk remediation.
- Track remediation actions, due dates, and supporting evidence, escalating high-risk or judgment-intensive gaps.
- Compile assessment-level data, SME review status, and remediation activity for status and portfolio reporting.
- Prepare routine status updates and supporting materials for internal stakeholder discussions.
Requirements
- 3-5 years of experience in Third-Party Risk Management (TPRM) or Governance, Risk & Compliance (GRC).
- Demonstrated experience performing substantive risk assessments and applying formula-based or quantitative risk methodologies.
- Bachelor’s degree in a relevant field (Cybersecurity, Business, Information Systems).
- Proficiency with a TPRM platform, including interpreting intake data and inherent risk scoring logic.
- Operational understanding of standard control frameworks (NIST SP 800-53, ISO 27001, SOC 2, SIG Core/Lite, CAIQ).
- Working knowledge of regulatory requirements (e.g., DORA, GDPR, NIS2, FedRAMP, PCI-DSS, OCC, CCPA).
- Attention to detail in gathering and checking documentation against methodology.
- Clear, professional communication skills for interacting with third parties and internal stakeholders.
- Reliability in managing a defined queue of onboarding and periodic review tasks.
Benefits
- Equity
- Employee stock purchase program
- Flexible paid time off
- 20 weeks fully-paid gender-neutral parental leave
- Fertility and adoption assistance
- 401(k) plan
- Mental health counseling
- Transgender-inclusive health insurance coverage
- Health benefits offerings
Workplace
- Remote North America
Skills
- Graphite Connect
- Jira
- NIST SP 800-53
- ISO 27001
- SOC 2
- SIG Core/Lite
- CAIQ
- DORA
- GDPR
- NIS2
- FedRAMP
- PCI-DSS
Show all 14 skills
- OCC
- CCPA
