Third Party Risk Manager
Core
Manage and lead the assessment of information security posture for key clients' third parties, overseeing execution, quality, and delivery of assessments.
Role type
Senior IC Third Party Risk Manager (Consulting)
Builds
Third-party risk assessments, security control validation reports, and remediation strategies for clients in regulated industries.
Domain
Cybersecurity, Third-Party Risk Management, Compliance (SOC 2, ISO 27001, NIST, HIPAA, PCI DSS, HITRUST)
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Third-party risk assessment, control validation, site visit management, cloud security evaluation (SaaS/PaaS/IaaS), risk documentation, executive reporting, team leadership, project management, compliance framework knowledge, security domain expertise (auditing, identity management, access management)
Preferred skills
GRC/VRM platform experience (Archer, ProcessUnity, ServiceNow, OneTrust), security ratings platform experience, mentoring junior professionals, bilingual capabilities
Technologies
SaaS, PaaS, IaaS, Archer, ProcessUnity, ServiceNow, OneTrust
Responsibilities
Leading third-party risk assessments by evaluating questionnaire responses and performing control validation; Managing and overseeing assessment teams, project timelines, and client deliverables; Performing and overseeing site visits to third-party facilities; Evaluating effectiveness of security controls for compliance; Assessing cloud technologies; Documenting risk findings and presenting remediation recommendations; Performing quality assurance reviews of team assessments; Delivering executive-level reports and presentations; Coordinating schedules and resource allocation; Supporting business development and client relationship management; Mentoring and coaching staff.
Seniority
Senior, hands-on IC with team leadership
