About the role
Requirements:
- 3+ years of progressive experience in Vendor/ Third-Party Risk Management and/or Information Security Risk Assessments.
- Demonstrated experience with Information Security Risk Assessments, Information Security auditing, controls verification, and Vendor / Third-Party Risk Management (TPRM).
- Strong understanding of third-party cybersecurity risk assessment methodologies, including inherent risk evaluation, residual risk analysis, control validation, and issue identification.
- Experience with risk analysis, risk matrix preparation, and control compliance validation.
- Familiarity with common compliance standards and frameworks such as SOX, SOC 2 PCI-DSS, GDPR, ISO 27001 HIPAA, and similar industry frameworks.
- Experience using and/or administering a Risk Management or GRC platform/tool.
- Ability to review assessment outputs for quality, accuracy, consistency, and alignment to internal standards and risk appetite.
- Strong understanding of vendor risk management principles, with the ability to clearly articulate concepts and guide others toward improved outcomes.
- Demonstrated flexibility to support a global operating model, including coverage across international time zones and rotational shifts if required.