Third Party Risk Senior Consultant
Core
Assessing the information security posture of key clients' third parties and coordinating the execution of assessments to identify risks and security gaps.
Role type
Senior Third Party Risk Consultant (Information Security)
Builds
Third party risk assessments, compliance reports, and remediation recommendations for clients in regulated industries.
Domain
Cybersecurity, Third Party Risk Management, Compliance (Healthcare, Pharma, Financial Services)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Third party risk assessment, control validation, site visit execution, cloud technology evaluation (SaaS/PaaS/IaaS), risk documentation, project management, compliance framework knowledge, technical communication
Preferred skills
GRC/VRM tools experience (Archer, Process Unity, ServiceNow), security ratings platforms, bilingual capability
Technologies
Archer, Process Unity, ServiceNow, SaaS, PaaS, IaaS, SOC2, ISO 27001, NIST, HIPAA
Responsibilities
Conduct third party risk assessments via questionnaires and control validation, perform site visits to third-party facilities, evaluate security controls for compliance, assess cloud technologies, document risk findings and recommendations, perform quality assurance on team assessments, coordinate assessment schedules and deliverables
Seniority
Senior, hands-on IC
