Cyber Security TPRM

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the comprehensive third-party risk assessment process, encompassing onboarding, routine evaluations, and offboarding.

• Formulate and sustain TPRM policies, procedures, and workflows that align with PCI, NIST, ISO 27001, SOC 2, and other relevant standards.

• Execute risk assessments and due diligence for both new and current vendors.

• Detect control deficiencies and propose remediation strategies.

• Work in partnership with Procurement, Legal, and Business Units to integrate security requirements into contracts and vendor selection processes.

• Track and present third-party risk metrics, trends, and compliance status to senior management.

• Manage and enhance AuditBoard and Archer for risk assessments, documentation, and reporting purposes.

• Assist in internal and external audits related to third-party risk and GRC initiatives.

• Remain informed about emerging threats, regulatory updates, and best practices in third-party risk management.

• Report directly to an IT Manager.

• Required to travel overnight less than 10% of the time.

⛳️ Requirements

• At least 5 years of experience in Third-Party Risk Management within an IT Security or GRC context.

• Solid knowledge of risk frameworks and regulatory standards, including CCPA, HIPAA, PCI-DSS, and NIST.

• Practical experience with GRC platforms such as AuditBoard and Archer.

• Exceptional analytical, communication, and stakeholder management abilities.

• Capability to work both independently and as part of a team in a dynamic environment.

• Advanced proficiency in Power BI or Tableau and advanced SQL skills.

• Experience in designing data models and executive dashboards that monitor vendor risk posture, SLAs, and compliance metrics.

• Practical experience in automating TPRM processes and integrating platforms like Panorays or Archer.

• Familiarity with Python, Power Automate, and REST APIs.

• Hands-on experience utilizing generative AI, LLMs, or OCR tools.

• Must be at least eighteen years old.

• Must have legal authorization to work in the United States.

• Bachelor’s degree or equivalent in a field related to IT.

• Minimum of 5 years of experience in an IT Cybersecurity role.

🏝️ Benefits

• Discretionary bonuses.

• 401(k) plan with company match.

• Employee Stock Purchase Plan.

• Paid time off including vacation, sick leave, volunteer days, holidays, birthdays, and floating holidays.

• Medical, dental, and vision insurance.

• Flexible spending accounts.

• Company-paid life insurance.

• Company-paid short-term disability.

• Optional long-term disability insurance.

• Additional life insurance options.

• Competitive weekly/bi-weekly pay.