We are looking for a Senior Vendor / Third-Party Risk Management Specialist to support our Vendor Risk Management program.
Key Responsibilities
- Conduct vendor/third-party security risk assessments and due diligence.
- Assess vendor security controls, identify risks, and track remediation.
- Review vendor security documentation and compliance reports.
- Support vendor onboarding, periodic assessments, and risk monitoring.
- Review security requirements in vendor contracts and agreements.
- Work with Security, IT, Procurement, Legal, and business teams.
- Participate in vendor security reviews and stakeholder discussions.
Required Skills
- 5+ years of experience in Third-Party Risk Management, Vendor Risk Management, Information Security Risk, or IT Risk.
- Hands-on experience with vendor security assessments and risk remediation.
- Positive understanding of information security controls and risk management.
- Strong communication and stakeholder-management skills.
- Knowledge of NIST / ISO 27001 / SOC 2 is preferred.
Preferred Certifications: CISSP, CISM, CISA, CRISC or equivalent.