Third Party Risk Manager

Requirements:

• 3+ years of progressive experience in Vendor/ Third-Party Risk Management and/or Information Security Risk Assessments.
• Demonstrated experience with Information Security Risk Assessments, Information Security auditing, controls verification, and Vendor / Third-Party Risk Management (TPRM).
• Strong understanding of third-party cybersecurity risk assessment methodologies, including inherent risk evaluation, residual risk analysis, control validation, and issue identification.
• Experience with risk analysis, risk matrix preparation, and control compliance validation.
• Familiarity with common compliance standards and frameworks such as SOX, SOC 2 PCI-DSS, GDPR, ISO 27001 HIPAA, and similar industry frameworks.
• Experience using and/or administering a Risk Management or GRC platform/tool.
• Ability to review assessment outputs for quality, accuracy, consistency, and alignment to internal standards and risk appetite.
• Strong understanding of vendor risk management principles, with the ability to clearly articulate concepts and guide others toward improved outcomes.
• Demonstrated flexibility to support a global operating model, including coverage across international time zones and rotational shifts if required.

Skills

GRC, TPRM, cybersecurity, information security, infosec, risk management, third-party risk, vendor risk