Key Responsibilities
Conduct third-party/vendor risk assessments and due diligence.
Evaluate vendor risks related to information security, data privacy, IT security, and regulatory compliance.
Review SOC 1, SOC 2, ISO 27001, and other compliance reports.
Identify potential risks, control gaps, and compliance issues.
Perform vendor security assessments using questionnaires and risk assessment frameworks.
Coordinate with vendors and internal stakeholders to obtain required documents and evidence.
Monitor vendor risk throughout the engagement lifecycle.
Prepare risk assessment reports and maintain proper documentation.
Track remediation plans and ensure timely closure of identified risks.
Ensure compliance with applicable regulatory requirements and internal policies.
Required Skills
Experience in Third-Party Risk Management (TPRM), Vendor Risk Management (VRM), or IT Risk Management.
Knowledge of information security, IT controls, and risk assessment frameworks.
Understanding of SOC 1, SOC 2, ISO 27001, GDPR, and other compliance standards.
Experience in vendor due diligence and risk assessment.
Solid analytical, documentation, and communication skills.
Ability to interact with vendors and internal stakeholders.Role & responsibilities