Third-Party Risk Analyst

• Job title Third-Party Risk Analyst
• Function Legal & Compliance
• Sub function Enterprise Compliance
• Category Analyst, Enterprise Compliance (P4 – E24)
• Location Bogotá Distrito Capital / Colombia
• Date posted Sep 08 2026
• Requisition number R-096978
• Work pattern Hybrid Work

Description

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Job Sub Function:

Job Category:

All Job Posting Locations:

Job Description:

Position Title: Third-Party Risk Analyst

Supervisor Title: Enterprise Compliance Sr. Specialist

Department Name / Number: GS Procurement- Third Party Risk

Physical Location of Position: Bogota

Geographic Scope of Responsibility: Global / Americas

Position Summary

The Third-Party Risk Analyst will perform Third party due diligence process as part of the Third-party risk management program. This role establishes and maintains procedures and controls to drive improvement initiatives supporting the daily operational activities of the team focusing on Third party risk. The analyst will also participate on ad hoc compliance projects and maintain procedures and controls to mitigate risk management, communications, audits, training, process capability/process improvement, and compliance general support.

Major Duties & Responsibilities

Approximate Percentage of Time: 80%

Third Parties Due Diligence

• Perform third-party sanctions screening, risk assessments, and enhanced due diligence activities to identify, evaluate, and mitigate third-party risk exposures.
• Conduct daily monitoring and review of screening alerts, assessing potential compliance and enterprise risk impacts and escalating high-risk findings in accordance with established governance frameworks.
• Support supplier master data governance initiatives, ensuring data integrity, risk transparency, and adherence to enterprise control requirements.
• Execute risk-based third-party due diligence processes prior to onboarding and throughout the lifecycle of existing third parties, ensuring risk levels are appropriately assessed, documented, and managed.
• Perform data quality reviews, risk control validations, and database reconciliations to strengthen the reliability, completeness, and accuracy of information used for risk-based decision-making.
• Design, enhance, and maintain risk awareness, communication, and training programs that promote a culture of compliance, risk ownership, and alignment with legal and regulatory requirements.
• Collaborate with cross-functional stakeholders to develop, update, and strengthen policies, procedures, desktop procedures (DTPs), and work instructions, ensuring alignment with evolving risk landscapes, regulatory expectations, and internal control frameworks.
• Identify opportunities to strengthen risk controls, improve monitoring capabilities, and drive process optimization, automation, and innovation to enhance operational resilience and risk mitigation.
• Partner closely with regional and global stakeholders to assess emerging risks, promote consistent risk management practices, and support enterprise-wide compliance objectives.
• Maintain comprehensive records and evidence supporting risk assessments, due diligence activities, investigations, and compliance controls in accordance with regulatory requirements, audit expectations, and enterprise retention standards.
• Support the implementation of risk-focused processes, governance structures, and technology solutions that enable effective change management, operational risk mitigation, and sustainable business transformation.

Approximate Percentage of Time: 20%

Continuous Improvement and Support Responsibilities

· Build, improve and maintain communication program and training processes through daily interaction with cross-functional teams while meeting legal requirements.

· Collaborate to update policies, procedure, DTPs and work instructions to reflect current processes.

· Identify enhancement opportunities to make more efficient the processes or opportunities to innovate or automate.

· Close connection with regional leads.

· Maintain all records related to their responsibilities according to the requirements of the current regulation and enterprise retention schedule

• Support on the implementation of structured processes and tools to initiate and support change management activities as designated by the organization

• Seek to continuously learn and improve knowledge and skills by identifying developmental opportunities with supervisor. Participate in appropriate training sessions and share lessons learned. Competently apply knowledge of new skills learned to existing projects and work.

• Collaborate with Procurement, Finance, Compliance, Regulatory, HCC, and other risk functions

• Drive continuous improvement and identify areas of opportunity

• Understand technical needs of our Risk Screening Tool

• Support Testing and Changes to tools supporting Risk Screenings

• Key support in Continuous improvement

Partnership and cross collaboration with all regions LATAM, EMEA, NA, ASPAC to develop a teamwork spirit, share best practices and suggest process improvements as needed on Suppliers Due Diligence process

Required Qualifications

Required Minimum Education: Bachelor's Degree Industrial engineering, Business Administration, Economics, Audit, Risk Management, LAFT/OFAC or Compliance Certification.

Required Years of Related Experience: 3+ years

Required Knowledge, Skills and Abilities (Uncompromised requirements for the role):

Key skills include:

• Excellent written and oral communication skills and an ability to present and interact with the highest level of business leaders; Ability to build strong business partnerships;

• Must talk English language.

• Three years of work experience in Compliance, risk management, Audit or related field.

• The ability to communicate clearly and concisely across all levels of the company is required.

• In depth knowledge of Procurement systems and processes are required.

Technical and programming skills

Travel on the Job

N/A at this moment

Percentage Traveled:

0%

Type of Travel Required: 0

People Management Experience:

Not applicable

Required Years of People Management Experience:

Not applicable

Preferred Qualifications

Preferred Minimum Education: Bachelor's Degree in related field

Preferred Area of Study: Bachelor's Degree Industrial engineering, Business Administration, Economics, Audit or Risk Management, LAFT/OFAC or Compliance Certification or related field is required

Preferred Related Industry Experience (if applicable): Pharmaceutical, Audit/consulting - big four, Global Services is a plus

Preferred Knowledge, Skills and Abilities:

• Results-driven individual and detail orientation.
• Exceptional listener and communicator who effectively conveys information verbally and in writing.

· The candidate must have strong analytical problem solving and interpersonal skills, leadership and influencing.

· Presentation skills.

· Must be able to work under pressure achieving consistently high results through individual and team efforts.

Good knowledge of MSOffice tools i.e. Excel, Power Point, Word

Key Working Relationships

Internal

Procurement, Compliance partners

External

3Rd Parties: Suppliers, Customers, Outsourced Providers, Regulatory agencies

Required Skills:

Preferred Skills: