Gather relevant business, regulatory, process, and system information; validate/update process flows, risks, and controls; prepares accurate, complete, clear, and timely analysis and documentation that reflects an ability to identify risks and independently assess the adequacy and effectiveness of IT internal controls, policies, processes and procedures. The Risk & Compliance Analyst II - Third-Party Risk Management (TPRM) will lead governance, risk, and compliance initiatives with a strong focus on third-party risk program management, vendor risk and control assessments, and risk treatment using OneTrust Third-Party Risk Management.