Cyber Security TPRM

About the Role

We are seeking a seasoned IT Security professional to lead and mature our IT and Third-Party Risk Management (TPRM) program within the Governance, Risk & Compliance (GRC) function. This role is critical to ensuring our vendors and IT partners meet our security standards and regulatory requirements. The ideal candidate will bring deep expertise in IT risk, TPRM, a strong understanding of GRC frameworks, and hands-on experience with platforms like AuditBoard/Optro or Archer.

Responsibilities

• Lead the end-to-end third-party risk assessment lifecycle, including onboarding, periodic reviews, and offboarding.
• Develop and maintain TPRM policies, procedures, and workflows aligned with regulatory and industry standards (e.g., PCI, NIST, ISO 27001, SOC 2).
• Conduct risk assessments and due diligence for new and existing vendors, identifying control gaps and recommending remediation.
• Collaborate with Procurement, Legal, and Business Units to ensure security requirements are embedded in contracts and vendor selection.
• Monitor and report on third-party risk metrics, trends, and compliance posture to senior leadership.
• Maintain and optimize GRC tools (AuditBoard, Archer) to support risk assessments, documentation, and reporting.
• Support internal and external audits related to third-party risk and overall GRC activities.
• Stay current with emerging threats, regulatory changes, and best practices in third-party risk and cybersecurity governance.

Qualifications

• Minimum 5 years of experience in Third-Party Risk Management within an IT Security or GRC function.
• Strong understanding of risk frameworks and regulatory requirements (e.g., CCPA, HIPAA, PCI-DSS, NIST).
• Hands-on experience with GRC platforms such as AuditBoard and Archer.
• Excellent analytical, communication, and stakeholder management skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Relevant certifications (e.g., CTPRP, CISA, CISSP, CRISC) are a plus.
• Business Intelligence & Analytics: Strong proficiency in tools such as Power BI or Tableau and advanced SQL to design data models and executive dashboards tracking vendor risk posture, SLAs, and compliance metrics.
• Workflow Automation & Integration: Hands-on experience automating TPRM processes and connecting platforms (such as Panorays or Archer) using languages such as Python, Power Automate, and REST APIs to eliminate manual reporting.
• AI & Intelligent Document Processing: Practical experience leveraging generative AI, LLMs, or OCR tools.

Direct Manager/Direct Reports:

• Reports directly to an IT Manager.
• This role will not have direct reports.

Travel Requirements:

• Typically requires overnight travel less than 10% of the time

Physical Requirements:

• Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

Working Conditions:

• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.

Minimum Qualifications:

• Must be eighteen years of age or older.
• Must be legally permitted to work in the United States.
• Bachelor’s or equivalent degree in a field of study related to IT.
• 5 years of experience in an IT Cybersecurity capacity

Minimum Education:

• Bachelor’s or equivalent degree in a field of study related to IT.

Minimum Years of Work Experience

• 5 years of experience in an IT Cybersecurity capacity.

Competencies:

• Agility and Resilience - Pivots quickly in response to changing dynamics. Learns from mistakes and exhibits grit to keep persevering.
• Business Insights - Understands the external and internal implications of decisions to advance organizational goals.
• Collaboration - Continuously engages others to ensure the best outcomes are achieved.
• Customer Focus - Builds strong customer relationships and delivers customer-centric solutions.
• Drives Results - Consistently drives positive outcomes, even under tough circumstances. Holds themselves and others accountable to deliver results.
• Develops Talent - Plans for and focuses on developing people to meet their career goals and the company's objectives.
• Leadership Courage - Says what needs to be said to reinforce our culture and steps up to address difficult issues, regardless of their role in the company.

Work Location:

• This is an on-site or remote position.

Not the right job for you? Register your details at the 'Introduce Yourself' link (top right) and we'll be in touch!

‎

As an Equal Employment Opportunity (EEO) employer SRS Distribution Inc., including all its subsidiaries, provides job opportunities to qualified individuals without regard to actual or perceived race, color, creed, religion, national origin, sex, gender, age, disability, gender identity, sexual orientation, citizenship status, uniform service, veteran status, marital status, genetic information, physical or mental disability, or any other characteristic in accordance with applicable federal, state, and local EEO laws. If you are an individual with a disability or a disabled veteran and require a reasonable accommodation in applying for any posted position, please contact Human Resources at US: 855.556.3221, or by email to: [email protected] with the nature of your accommodation request and include the Business name, location and title of the job opening. Please allow one (1) business day for a reply. All employment offers are contingent upon successful completion of a background check and drug screen, as permitted by law.

‎

Competitive weekly/bi-weekly pay, discretionary bonuses, 401(k) with company match, Employee Stock Purchase Plan, paid time off (vacation, sick, volunteer, holidays, birthday, floating), medical/dental/vision, flexible spending accounts, company-paid life and short-term disability, plus optional long-term disability, and additional life insurance. All benefits subject to eligibility.

‎

‎

Should a Candidate be submitted to fill a position by a recruiting or staffing services agency (“Agency”), the Company has no obligation to pay the Agency any fee for submission, offer, placement or any service without a fully executed contract of service covering the engagement.