Third-Party Risk Management, Senior Associate
Core
Evaluate vendor security posture, manage evidence collection and remediation, and provide risk reporting to senior leadership and stakeholders.
Role type
Senior IC third-party risk management associate
Builds
Vendor risk assessments, security questionnaires, remediation tracking, and risk registers
Domain
Professional services / Third-party risk management
Required skills
Vendor security assessment, security questionnaire administration, evidence validation, remediation tracking, risk rating, stakeholder communication, process improvement
Preferred skills
GRC platforms (ServiceNow, OneTrust, Archer, ProcessUnity), security certifications (CTPRP, CISA, CRISC), data privacy knowledge, project management tools (Smartsheet, MS Project, SharePoint)
Technologies
ServiceNow, OneTrust, Archer, ProcessUnity, Smartsheet, MS Project, SharePoint
Responsibilities
Conduct security reviews of prospective and existing vendors; Administer security questionnaires and collect/validate supporting evidence; Track remediation items to closure; Maintain third-party risk register and produce regular reporting; Support procurement due diligence and contract language reviews
Seniority
Senior, hands-on IC
