Third Party Risk Mgmt
Core
Designing and reviewing business-driven IT solutions and processes to meet cybersecurity and regulatory requirements, maintaining audit readiness, and managing risk, threats, and vulnerabilities.
Role type
Senior cybersecurity assurance and risk management specialist
Builds
Audit-ready security architectures and compliance frameworks for enterprise clients
Domain
Cybersecurity, Risk Management, Compliance
Required skills
Cybersecurity risk assessment, Vulnerability management, Security framework knowledge (NIST, RMF, ISO), Threat analysis, Audit readiness, Regulatory compliance
Preferred skills
NIST 800-30, ISO 27005, ISO 31000, Audit experience (SOC1/2/3, ISO 27001, HITRUST, PCI-DSS), Cybersecurity certifications
Technologies
NIST, RMF, ISO, Common Criteria, SOC1, SOC2, SOC3, ISO 27001, ISO 27017, ISO 27018, HITRUST, PCI-DSS
Responsibilities
Design and review IT solutions for cybersecurity and regulatory compliance; Maintain audit readiness through reviews and tests; Identify new risks, threats, and vulnerabilities; Define security processes for assurance and compliance; Ensure security subsystems meet business needs; Utilize vulnerability management processes to remediate risks
Seniority
Senior, hands-on IC
