{"id":4327165,"url":"https://alion.io/job/srs-distribution-cyber-security-tprm","title":"Cyber Security TPRM","company":{"id":1862700,"name":"SRS Distribution","domain":"srsdistribution.com","url":"https://alion.io/company/srsdistribution","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":24,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["McKinney, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"OCR","optional":true},{"name":"Power Automate","optional":true},{"name":"Power BI","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true},{"name":"SQL","optional":true},{"name":"Tableau","optional":true}],"status":"live","first_seen_at":"2026-11-13T00:00:00Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-15T01:55:13Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About the Role\nWe are seeking a seasoned IT Security professional to lead and mature our IT and Third-Party Risk Management (TPRM) program within the Governance, Risk & Compliance (GRC) function. This role is critical to ensuring our vendors and IT partners meet our security standards and regulatory requirements. The ideal candidate will bring deep expertise in IT risk, TPRM, a strong understanding of GRC frameworks, and hands-on experience with platforms like AuditBoard/Optro or Archer.\nResponsibilities\nLead the end-to-end third-party risk assessment lifecycle, including onboarding, periodic reviews, and offboarding.\nDevelop and maintain TPRM policies, procedures, and workflows aligned with regulatory and industry standards (e.g., PCI, NIST, ISO 27001, SOC 2).\nConduct risk assessments and due diligence for new and existing vendors, identifying control gaps and recommending remediation.\nCollaborate with Procurement, Legal, and Business Units to ensure security requirements are embedded in contracts and vendor selection.\nMonitor and report on third-party risk metrics, trends, and compliance posture to senior leadership.\nMaintain and optimize GRC tools (AuditBoard, Archer) to support risk assessments, documentation, and reporting.\nSupport internal and external audits related to third-party risk and overall GRC activities.\nStay current with emerging threats, regulatory changes, and best practices in third-party risk and cybersecurity governance.\nQualifications\nMinimum 5 years of experience in Third-Party Risk Management within an IT Security or GRC function.\nStrong understanding of risk frameworks and regulatory requirements (e.g., CCPA, HIPAA, PCI-DSS, NIST).\nHands-on experience with GRC platforms such as AuditBoard and Archer.\nExcellent analytical, communication, and stakeholder management skills.\nAbility to work independently and collaboratively in a fast-paced environment.\nRelevant certifications (e.g., CTPRP, CISA, CISSP, CRISC) are a plus.\nBusiness Intelligence & Analytics: Strong proficiency in tools such as Power BI or Tableau and advanced SQL to design data models and executive dashboards tracking vendor risk posture, SLAs, and compliance metrics.\nWorkflow Automation & Integration: Hands-on experience automating TPRM processes and connecting platforms (such as Panorays or Archer) using languages such as Python, Power Automate, and REST APIs to eliminate manual reporting.\nAI & Intelligent Document Processing: Practical experience leveraging generative AI, LLMs, or OCR tools.\nDirect Manager/Direct Reports:\nReports directly to an IT Manager.\nThis role will not have direct reports. \nTravel Requirements:\nTypically requires overnight travel less than 10% of the time\nPhysical Requirements:\nMost of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles. \nWorking Conditions:\nLocated in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable. \nMinimum Qualifications:\nMust be eighteen years of age or older.\nMust be legally permitted to work in the United States.\nBachelor’s or equivalent degree in a field of study related to IT. \n5 years of experience in an IT Cybersecurity capacity\nMinimum Education:\nBachelor’s or equivalent degree in a field of study related to IT. \nMinimum Years of Work Experience\n\n5 years of experience in an IT Cybersecurity capacity.\nCompetencies:\nAgility and Resilience - Pivots quickly in response to changing dynamics. Learns from mistakes and exhibits grit to keep persevering.\nBusiness Insights - Understands the external and internal implications of decisions to advance organizational goals.\nCollaboration - Continuously engages others to ensure the best outcomes are achieved.\nCustomer Focus - Builds strong customer relationships and delivers customer-centric solutions.\nDrives Results - Consistently drives positive outcomes, even under tough circumstances. Holds themselves and others accountable to deliver results.\nDevelops Talent - Plans for and focuses on developing people to meet their career goals and the company's objectives.\nLeadership Courage - Says what needs to be said to reinforce our culture and steps up to address difficult issues, regardless of their role in the company.\nWork Location:\nThis is an on-site or remote position.\nNot the right job for you? Register your details at the 'Introduce Yourself' link (top right) and we'll be in touch!\nAs an Equal Employment Opportunity (EEO) employer SRS Distribution Inc., including all its subsidiaries, provides job opportunities to qualified individuals without regard to actual or perceived race, color, creed, religion, national origin, sex, gender, age, disability, gender identity, sexual orientation, citizenship status, uniform service, veteran status, marital status, genetic information, physical or mental disability, or any other characteristic in accordance with applicable federal, state, and local EEO laws.\n\nIf you are an individual with a disability or a disabled veteran and require a reasonable accommodation in applying for any posted position, please contact Human Resources at US: 855.556.3221, or by email to:  with the nature of your accommodation request and include the Business name, location and title of the job opening. Please allow one (1) business day for a reply.\n\nAll employment offers are contingent upon successful completion of a background check and drug screen, as permitted by law.\nCompetitive weekly/bi-weekly pay, discretionary bonuses, 401(k) with company match, Employee Stock Purchase Plan, paid time off (vacation, sick, volunteer, holidays, birthday, floating), medical/dental/vision, flexible spending accounts, company-paid life and short-term disability, plus optional long-term disability, and additional life insurance. All benefits subject to eligibility.\n\nShould a Candidate be submitted to fill a position by a recruiting or staffing services agency (“Agency”), the Company has no obligation to pay the Agency any fee for submission, offer, placement or any service without a fully executed contract of service covering the engagement.","description_format":"text","description_chars":6221,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Wholesale","Security Compliance","Building Materials"],"lifecycle":[{"event":"open","at":"2026-11-15T01:55:13Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 5","filings_12m":5,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":137500,"route":null,"cap_exempt":false,"checked_at":"2026-11-14T07:33:33+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":25,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-11-15T04:36:42Z"},"pay":null,"html_url":"https://alion.io/job/srs-distribution-cyber-security-tprm","json_url":"https://alion.io/job/srs-distribution-cyber-security-tprm.json","meta":{"generated_at":"2026-11-15T04:36:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":576,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1862700},"rest":"https://alion.io/mcp/rest/get_company?id=1862700"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsrs-distribution-cyber-security-tprm"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsrs-distribution-cyber-security-tprm"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsrs-distribution-cyber-security-tprm"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/srs-distribution-cyber-security-tprm\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsrs-distribution-cyber-security-tprm"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4327165}},{"tool":"search_jobs","arguments":{"company":"srsdistribution.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4327165},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}