Vendor Due Diligence Specialist
Core
Technical subject matter expert performing in-depth security assessments of third parties to evaluate design and effectiveness of security controls across technical environments.
Role type
Senior IC third-party risk management specialist (information security)
Builds
Risk-based assessment reports explaining issue materiality, actual risk, and recommended next steps
Domain
Information security / Third-party risk management
Deliverable
dashboards & analysis
Required skills
Third-party security assessments, Cloud security, Identity and access management, Network security, Vulnerability management, Data protection, Security frameworks (NIST, ISO, SOC 2), Technical control evaluation, Risk analysis
Preferred skills
N/A
Technologies
N/A
Responsibilities
Perform in-depth security assessments of new and existing third parties, Evaluate design and effectiveness of third-party security controls, Analyze business use cases, data flows, and technical architectures, Review security evidence including assurance reports and penetration tests, Engage third parties and internal stakeholders to validate responses and investigate gaps, Produce concise risk-based assessment reports, Improve assessment methodologies and processes
Seniority
Senior, hands-on IC
