Lead Third-Party Cyber Risk Management Analyst - Vendor Risk & GRC (TPRM Lead)

Our client, a IT Services and Consulting company, is looking for a Lead Third-Party Cyber Risk Management Analyst - Vendor Risk & GRC (TPRM Lead) for their Charlotte, NC/ Hybrid location.

Responsibilities:

Third-Party Cybersecurity Management

• Vendor Assessments: Lead comprehensive cybersecurity assessments of third-party vendors.
• Risk Evaluation: Evaluate and document cybersecurity risks associated with third-party relationships.
• Security Controls: Define and validate security control requirements for vendors.

Risk Management

• Risk Framework: Implement and maintain third-party risk management frameworks.
• Policy Development: Develop policies and standards for third-party cybersecurity.
• Remediation Tracking: Track and manage remediation of identified third-party risks.

Requirements:

• Experience: 8+ years of hands-on experience in Cybersecurity & Risk Management.
• Third-Party Risk: Deep expertise in third-party risk assessment and management.
• Security Frameworks: Knowledge of security frameworks (NIST, ISO 27001, SOC 2).
• Assessment Skills: Strong vendor security assessment and audit capabilities.
• Leadership: Experience leading risk management initiatives.
• Stakeholder Management: Effectively manage relationships with vendors and internal stakeholders.
• Analytical: Strong analytical skills for risk assessment and prioritization.
• Strong Communicator: Clearly communicate risk findings to diverse audiences.
• Years of Experience: 10.00 Years of Experience

Skills:

• Category Name Required Importance
• Security PG Risk Management Yes 1
• Security PG Vendor Risk Management Yes 1

Why Should You Apply?

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities