Third Party Risk Analyst, Procore
$111.8-153.7k
Eligible for Bonus Incentive Compensation + Equity
Construction management platform
Be an early applicant
Construction management platform
1001+ employees
Be an early applicant
$111.8-153.7k
Eligible for Bonus Incentive Compensation + Equity
1001+ employees
Company mission
To connect everyone in construction on a global platform.
Role
Who you are
- The ideal candidate will have a proactive approach to problem-solving and a strong understanding of risk management principles, as well as the ability to work independently to ensure all tasks are completed accurately and on time
- Experience: Bachelor’s degree and at least 5 years of direct experience in third party risk management, information security, or GRC. Direct experience conducting complex, end-to-end risk assessments, preferably in a fast-paced or regulated environment
- Technical Knowledge: Deep understanding of information security and data protection frameworks (e.g., NIST CSF, ISO 27001, SOC 2) and regulations (e.g., GDPR, CCPA, EU AI ACT). Strong knowledge of different data and system risk types and a proactive approach to risk mitigation
- Platform Proficiency: Hands-on experience with a TPRM platform like OneTrust, including customizing workflows and managing automations
- Skills: Exceptional communication and presentation skills, with the ability to interact effectively with stakeholders at all levels. Provide critical thinking with strong analytical and problem-solving abilities
- Independent Contributor: Proven ability to work independently, take ownership of tasks, and prioritize effectively in a dynamic environment
- Preferred: Familiarity with data analysis and visualization tools like Power BI to support data-driven decisions
What the job involves
- We're looking for a highly motivated and detail-oriented Third Party Risk Management (TPRM) Analyst to join our Governance, Risk, and Compliance (GRC) organization
- In this role, you will be a key contributor to the security of our supply chain by leading complex risk assessments
- You'll be responsible for the full lifecycle of third party risk management— including vendor intake, due diligence, ongoing monitoring and offboarding
- This position reports to our Director, Data Protection. We’re looking for someone to join us immediately
- Execute the TPRM Process: Conduct comprehensive risk assessments on third parties including analysis of appropriate security controls, contract requirements, and compliance documentation. You'll be responsible for gathering necessary information directly from third parties
- Identify Critical Systems and Assets: Partner with technical and business teams to map sensitive data and critical systems. You'll also categorize third parties to guide reassessment and identify processor/sub-processor relationships
- Contribute to Program Development: Help shape and refine our TPRM policies and procedures. Look for ways to improve efficiency, including the use of automation and AI
- Support Contracting: Work with our legal and procurement teams to include security and data protection requirements in contracts
- Maintain Accurate Records: Accurately document all assessment activities, findings, and mitigation efforts in our TPRM platform (OneTrust)
- Provide Operational Support: Guide business owners and third parties through the TPRM process, answering questions and providing a smooth experience
- Monitor and Report: Support ongoing monitoring of third parties and contribute to recurring reports on the program's health and effectiveness
Our take
Construction tech company Procore offers a cloud-based construction management platform. With substantial productivity gains and cost reductions on the table for construction companies that digitize more efficiently, Procore’s offerings are an attractive prospect for those operating in the industry.
Founded in 2002, Procore now serves over 15,000 businesses, providing a range of products for preconstruction, project management, and resource and financial management. Its platform is built atop multi-zone cloud infrastructure, and is able to house every app, document, and person involved in projects, providing visibility that simplifies processes for everyone involved.
With promising stock performance and a legacy position in the construction tech sector, Procore seems likely to continue a steady upward trajectory in this growing market. The company published its first Environmental, Social and Governance report in 2022, highlighting its commitment to work towards a more sustainable future, and has continued to develop integrations and partnerships to improve its offerings.
Steph
Company Specialist at Welcome to the Jungle
Insights
12% employee growth in 12 months
Company
Funding (last 2 of 11 rounds)
May 2020
$150m
LATE VC
Sep 2019
$94.9m
SERIES I
Total funding: $567.8m
Company benefits
- Comprehensive healthcare benefits, long-term disability, life insurance and other wellness resources
- Values-driven PTO that is based on openness, ownership and optimism – take the time you need when you need it
- Retirement benefits such as a 401k or RRSP with employer contribution (varies by country).
- Employee Stock Purchase Plan for eligible employees
- Employee enrichment program with classes and programs for personal and professional development
- Procore Perks - a reimbursable stipend for purpose-driven goods and services that support work/life well-being and physical and financial wellness
- Family building benefits including fertility treatments (with some medical plans) and cash benefits to support adoption and surrogacy
Company HQ
Carpinteria, CA
Leadership
Tooey Courtemanche
(CEO)Worked as a Software Engineer at Skip Steveley & Associates after graduating from the University of Arizona. They were also CEO of Webcage, a software consultancy company.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 22 more jobs at Procore