Third Party Risk Manager
Core
Lead Third-Party Risk Management (TPRM) and Vendor Risk Management (VRM) engagements for global clients, assessing cybersecurity and operational risks across vendor ecosystems.
Role type
Senior IC Third-Party Risk Manager (Cybersecurity Consulting)
Builds
Vendor risk profiles, assessment reports, executive summaries, and strengthened third-party governance programs.
Domain
Cybersecurity, Risk Management, Professional Services
Deliverable
production ML models | product features | dashboards & analysis | client delivery
Required skills
Third-Party Risk Management, Vendor Risk Management, Cybersecurity Risk Assessment, SOC 2 Type II review, Penetration Testing review, Vulnerability Assessment review, PCI DSS assessment, NIST RMF, ISO 27001, Cloud Security, Network Security, Data Privacy, Business Continuity, Incident Management, Team Leadership, Stakeholder Management
Preferred skills
CISA, CISSP, CISM, CCSP, ISO 27001 Lead Auditor, CTPRA, AWS/Azure/GCP certifications, Secure SDLC, GRC regulations, Onsite audit experience
Technologies
NIST, ISO 27001, PCI DSS, SOC 2, AWS, Azure, Google Cloud
Responsibilities
Lead TPRM and VRM engagements for global clients; Conduct cybersecurity risk assessments using industry frameworks; Evaluate vendor security controls and maturity; Review security assurance reports (SOC 2, Pen Testing, Vulnerability, PCI DSS); Support NIST RMF and A&A processes; Develop vendor risk profiles and assess regulatory risks; Prepare assessment reports and executive summaries; Manage multiple client engagements and deliverables; Mentor team members and foster professional growth.
Seniority
Senior, hands-on IC with team leadership
