Third-Party Risk Analyst - Security & Vendor Vetting

Clio is seeking a Third-Party Risk Analyst to own the day-to-day security review of vendors and App Marketplace partners, reading SOC 2 and penetration test reports and assessing privacy disclosures.

You will triage DPIAs, escalate risks, track submissions, and maintain the third-party risk registry while collaborating with Privacy, Legal and IT teams.

Experience with audit artifacts, data residency concepts, and a detail‑driven, evidence‑first approach will help you succeed.