Join our team as a Digital Risk Consultant specializing in Third-Party Risk Management (TPRM) and vendor security.

This role focuses on evaluating and mitigating cyber risks associated with our third-party vendors and service providers. You will leverage advanced platforms and industry frameworks to ensure robust security and compliance across our digital ecosystem.

We are seeking an individual with a keen eye for detail and a proactive approach to risk mitigation.

Conduct comprehensive cybersecurity and information security risk assessments for third-party vendors.

Utilize and administer continuous monitoring platforms (e.g., Radar, BitSight) for security ratings and threat intelligence.

Investigate and triage cyber risk alerts, analyzing changes in vendor security posture and their business impact.

Coordinate and participate in third-party cybersecurity incident response activities.

Evaluate the security, privacy, governance, compliance, and operational risks of AI-enabled vendors and technologies.

Escalate critical findings and facilitate remediation efforts with suppliers and internal teams.

Track vendor remediation commitments to ensure successful closure and appropriate risk disposition.

Experience in conducting cybersecurity and information security risk assessments for third parties.

Familiarity with security rating and continuous monitoring platforms.

Understanding of external attack surface management and threat monitoring concepts.

Knowledge of cybersecurity frameworks and standards such as NIST CSF, ISO 27001, and FFIEC.

Ability to analyze vendor security posture and assess business impact.

Experience with cybersecurity incident response activities is beneficial.

Familiarity with AI-enabled vendor risk evaluation is a plus.

Excellent communication and stakeholder management skills are essential.