Join our team as a Third-Party Risk Management Specialist, focusing on subcontractor oversight and ensuring robust vendor partnerships.

This role is crucial for maintaining security and compliance across our global vendor ecosystem. You will be instrumental in assessing and mitigating risks associated with our third-party relationships.

Conduct comprehensive risk assessments for vendors, covering cybersecurity, data privacy, operational efficiency, and compliance.

Execute thorough vendor due diligence processes during onboarding and periodic reviews.

Analyze vendor evidence, including SOC reports, ISO 27001 certifications, and penetration test results.

Evaluate vendor adherence to key security frameworks like ISO 27001, NIST, SOC 2, and internal policies.

Identify security gaps, document findings, and propose effective risk mitigation strategies.

Ensure alignment with global regulations such as GDPR and support internal audit requirements.

Manage the full third-party lifecycle, from onboarding and monitoring to issue resolution and off-boarding.

Utilize GRC or risk management tools to track vendor risks and remediation efforts.

Collaborate closely with Procurement, Legal, IT, Privacy, and Business units.

Participate in internal audits, regulatory reviews, and risk governance discussions.

A minimum of 6 years of experience is required in Third-Party Risk Management, Vendor Risk, Cybersecurity Risk, IT Audit, or GRC.

Possess a deep understanding of the TPRM lifecycle and established vendor risk frameworks.

Demonstrate hands-on experience with security assessments and control testing methodologies.

Exhibit strong knowledge of core cybersecurity concepts, access controls, incident response, and data protection principles.

Possess excellent analytical, documentation, and stakeholder communication capabilities.

Previous experience working with global vendors and managing cross-region stakeholders is essential.