Third Party Risk Manager

Requirements:
3+ years of progressive experience in Vendor/ Third-Party Risk Management and/or Information Security Risk Assessments.
Demonstrated experience with Information Security Risk Assessments, Information Security auditing, controls verification, and Vendor / Third-Party Risk Management (TPRM).
Strong understanding of third-party cybersecurity risk assessment methodologies, including inherent risk evaluation, residual risk analysis, control validation, and issue identification.
Experience with risk analysis, risk matrix preparation, and control compliance validation.
Familiarity with common compliance standards and frameworks such as SOX, SOC 2 PCI-DSS, GDPR, ISO 27001 HIPAA, and similar industry frameworks.
Experience using and/or administering a Risk Management or GRC platform/tool.
Ability to review assessment outputs for quality, accuracy, consistency, and alignment to internal standards and risk appetite.
Strong understanding of vendor risk management principles, with the ability to clearly articulate concepts and guide others toward improved outcomes.
Demonstrated flexibility to support a global operating model, including coverage across international time zones and rotational shifts if required.

Experience
3-7 yrs