Sr. Third Party Risk Specialist
Core
Own and evolve enterprise-wide third-party security risk strategy, including automation, continuous monitoring, and emerging risk domains (e.g., AI/ML vendors) for a payments platform.
Role type
Senior individual contributor third-party risk management specialist
Builds
Scalable third-party risk governance frameworks, automated due diligence workflows, and continuous monitoring programs for critical vendors
Domain
Fintech / Payments / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Third-party risk program strategy, vendor governance, due diligence execution, continuous monitoring, AI/ML vendor risk assessment, risk tiering, workflow orchestration, GRC tool administration, cross-functional stakeholder influence, regulatory compliance (SIG, CSA STAR, ISO 27001, SOC 2, PCI DSS, NIST AI RMF)
Preferred skills
Payments/fintech industry experience, client due diligence in regulated environments, automation platform expertise, deep understanding of AI/ML service governance
Technologies
BlackKite, Responsive, Serval, N8N
Responsibilities
Own and evolve enterprise-wide third-party security risk strategy, including automation, continuous monitoring, and emerging risk domains; Liaise with cross-functional teams to operationalize third-party security risk controls; Communicate complex vendor risk landscapes to senior leadership; Drive alignment on risk tolerance and mitigation strategies; Execute and innovate efficiency strategies for incoming due diligence requests; Administer in-scope tech stack; Coach and develop team members to mature TPRM capabilities; Maintain and improve risk framework artifacts; Partner with Legal, Procurement, and business owners on risk documentation and mitigation; Monitor critical and high-risk vendors for control changes and compliance concerns
Seniority
Senior, hands-on IC with strategic influence
