Cyber Security TPRM

About the Role

We are seeking a seasoned IT Security professional to lead and mature our IT and Third-Party Risk Management (TPRM) program within the Governance, Risk & Compliance (GRC) function. This role is critical to ensuring our vendors and IT partners meet our security standards and regulatory requirements. The ideal candidate will bring deep expertise in IT risk, TPRM, a strong understanding of GRC frameworks, and hands-on experience with platforms like AuditBoard/Optro or Archer.

Responsibilities

• Lead the end-to-end third-party risk assessment lifecycle, including onboarding, periodic reviews, and offboarding.
• Develop and maintain TPRM policies, procedures, and workflows aligned with regulatory and industry standards (e.g., PCI, NIST, ISO 27001, SOC 2).
• Conduct risk assessments and due diligence for new and existing vendors, identifying control gaps and recommending remediation.
• Collaborate with Procurement, Legal, and Business Units to ensure security requirements are embedded in contracts and vendor selection.
• Monitor and report on third-party risk metrics, trends, and compliance posture to senior leadership.
• Maintain and optimize GRC tools (AuditBoard, Archer) to support risk assessments, documentation, and reporting.
• Support internal and external audits related to third-party risk and overall GRC activities.
• Stay current with emerging threats, regulatory changes, and best practices in third-party risk and cybersecurity governance.

Qualifications

• Minimum 5 years of experience in Third-Party Risk Management within an IT Security or GRC function.
• Strong understanding of risk frameworks and regulatory requirements (e.g., CCPA, HIPAA, PCI-DSS, NIST).
• Hands-on experience with GRC platforms such as AuditBoard and Archer.
• Excellent analytical, communication, and stakeholder management skills.
• Ability to work independently and collaborat...

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis.