Vendor Risk Management Analyst

The Vendor Risk Management (VRM) Analyst assists with the daily activities of GoDaddy’s third-party risk programme within the Data Governance & Operations (DGO) team. Partnering closely with the VRM Manager, this position helps oversee vendor relationships in a responsible and effective manner. It manages intake procedures, supports reviews with business owners and colleagues, keeps thorough records, and promotes clear communication among teams. You’ll contribute significantly to maintaining the programme’s smooth operation by introducing structure, organisation, and consistency to an already well-ordered environment.

We’re looking for someone who is diligent, organised, and dependable, and who takes pride in enabling well-run operations. You’ll engage with team members from various functions and support a comprehensive risk management framework while advancing your expertise in vendor risk and governance. If you enjoy working with processes, aiding participants, and steadily refining work methods, this is a great opportunity to grow in a dynamic in-house setting!

• →Manage intake requests for initiating partnerships with vendors, gather required documentation, and start assessments in the VRM system of record
• →Monitor the progress of ongoing assessments and check in with company leaders and reviewers to ensure engagements advance through the workflow
• →Maintain accurate and up-to-date vendor records throughout the engagement lifecycle, including renewals and offboarding
• →Serve as a first point of contact for business owners navigating the VRM process, answering questions and explaining requirements in plain language
• →Assist business owners with their duties in the intake and assessment workflow, raising issues or exceptions when necessary
• →Inform subject matter experts in Information Security, Privacy, and Legal about new vendor engagements that need their assessment
• →Track outstanding reviews and send follow-up reminders; bring up delays to the VRM Manager

• 3+ years of experience in running vendor risk, handling third-party risk, compliance operations, or a similar administrative or operational position
• Familiarity with VRM or GRC concepts and common frameworks such as SIG, CAIQ, NIST, and SOC 2 is important. You don’t need to be a technical expert. However, you should understand the basics of how vendor assessments work.
• Strong organizational skills and attention to detail; comfortable managing a high volume of concurrent requests without dropping the ball
• Clear, professional communication and collaboration skills — you’ll regularly interact with company founders, outside vendors, and cross-functional collaborators
• Proficiency with Microsoft 365; experience with GRC or VRM platforms (e.g., OneTrust, ServiceNow) a plus
• Comfortable working in a distributed environment across time zones

• Exposure to data privacy concepts and how they intersect with vendor due diligence (GDPR, CCPA, etc.)
• Experience with third-party incident notification workflows
• Familiarity with AI or emerging technology vendor considerations

We encourage you to apply even if your experience or skillset doesn’t align perfectly with every requirement. We value a wide range of backgrounds and transferable skills, and we are excited to support learning and growth.