Third Party Risk Management Expert

• Support the implementation and continuous improvement of the TPRM operating model
• Perform cybersecurity risk assessments of new and existing suppliers
• Review security questionnaires and evidence, including ISO/IEC 27001 certificates, SOC 2 reports, penetration test summaries, and security policies
• Identify control gaps and define remediation actions, compensating controls, and risk escalation requirements
• Manage supplier assessments from onboarding and inherent risk screening through remediation, reassessment, and offboarding
• Coordinate cybersecurity questionnaire responses for customers and partners
• Maintain auditable records and support risk reporting through KPIs and KRIs
• Work closely with GRC, Cybersecurity, Procurement, Legal, Business Owners, and suppliers
• Identify opportunities to automate and streamline the TPRM lifecycle
• Support knowledge transfer to the internal GRC team

• Experience in TPRM, cybersecurity risk, IT audit, security assurance, or GRC
• Knowledge of supplier risk assessments
• Knowledge of security controls
• Knowledge of ISO/IEC 27001
• Knowledge of SOC 2
• Strong analytical skills
• Strong communication skills
• Strong stakeholder management skills
• Strong reporting skills

• Employees can work remotely