IT Vendor Risk Specialist
Core
Assess, manage, and improve third-party information security risk across the supplier landscape to protect member data.
Role type
IT Vendor Risk Specialist
Builds
Audit-ready assessment reports and governance documentation for third-party security risks
Domain
Healthcare / Information Security / Third-Party Risk Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vendor risk assessments, security control reviews, risk identification, audit preparation, stakeholder partnership, governance documentation, risk escalation, regulatory framework knowledge
Preferred skills
None stated
Technologies
ISO 27001, NIST, SOC 2, COBIT, APRA CPS 234/CPS 230
Responsibilities
Conduct vendor risk assessments for new and existing suppliers, Review vendor security controls and assurance reports, Identify and document risks and control gaps, Prepare clear audit-ready assessment reports, Partner with Procurement, Cyber Security, Technology and business teams, Support internal and external audits
Seniority
Mid-level, hands-on IC
