Momentive Software offers cutting-edge software for nonprofits. Partner with us to achieve your goals and make a meaningful impact in your community. Backed by Insight.
About the role
The Third-Party Risk Management (TPRM)Analyst serves as a core member of Momentive Software's Cybersecurity, Risk & Compliance organization. This role is responsible for maintaining and maturing Momentive's enterprise-wide third-party risk program, ensuring that all vendors, platforms, and service providers meet the Firm's cybersecurity, privacy, resiliency, and regulatory requirements. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Maintain Momentive's global inventory of third-party providers, applications, and services from onboarding through termination
- Lead vendor cybersecurity assessments, coordinating with Cybersecurity Engineering, Legal, and business owners to evaluate risk and required controls
- Assess vendor maturity using NIST CSF, CIS, CMMC, GDPR, PCI DSS, SOC 2, and other frameworks
- Oversee vendor SLAs, RPO/RTO commitments, breach notification requirements, and cybersecurity insurance documentation
- Ensure thorough documentation of findings, recommendations, and remediation plans for all vendor assessments
- Serve as a liaison to internal and external auditors for vendor-related controls and evidence collection
More about this role
POSITION OVERVIEW
The Third-Party Risk Management (TPRM)Analyst serves as a core member of Momentive Software's Cybersecurity, Risk & Compliance organization. This role is responsible for maintaining and maturing Momentive's enterprise-wide third-party risk program, ensuring that all vendors, platforms, and service providers meet the Firm's cybersecurity, privacy, resiliency, and regulatory requirements.
The Analyst partners closely with Client Success, Cybersecurity Engineering, TVM, Legal, Procurement, Product, and the CISO to evaluate vendor risk, maintain continuous oversight of third-party controls, and support Momentive's compliance obligations — including SOC 2 Type II and PCI DSS. The role also supports TVM notifications to clients who manage their own cybersecurity posture, ensuring clear, accurate, and timely communication of vulnerabilities and remediation expectations.
This position requires strong analytical capability, deep familiarity with cybersecurity frameworks, and the ability to translate complex risk issues into actionable guidance for business and technical stakeholders.
KEY RESPONSIBILITIES
Third-Party Risk Management Program
- Maintain Momentive's global...
Browse similar: Startup jobs · Remote jobs