Supplier Fraud & Third-Party Risk Analyst

Key Responsibilities: Conduct fraud and control risk assessments for third-party relationships. Review and evaluate SOC 1 and SOC 2 reports. Identify control gaps, exceptions, complementary user entity controls (CUECs), and other potential areas of risk. Analyze assessment findings and communicate relevant risks and recommendations to key stakeholders. Support ongoing third-party risk and control review activities. Assist with increased assessment volume and changing business priorities as needed. Apply third-party risk, internal audit, external audit, or related control practices to supplier assessments. Document findings clearly and maintain accurate assessment records.

Qualifications: 6+ years of experience in fraud, internal or external audit, controls, third-party risk, or a related discipline. Hands-on experience reviewing and analyzing SOC 1 and SOC 2 reports. Strong understanding of control gaps, exceptions, and CUECs. Experience evaluating supplier, vendor, or third-party controls. Strong analytical, documentation, and communication skills. Ability to manage multiple assessments and priorities in a fast-paced environment. Experience within a regulated or complex enterprise environment is preferred. Knowledge of fraud risk, fraud typologies, and third-party risk management practices is preferred. CFE, CISA, CPA, CTPRP, or a similar professional certification is preferred but not required.

Publishing Pay Range: $55.00 – $63.00 hourly This is a fully remote role and can be performed from an approved location.