Join our team to drive robust Third-Party Risk Management (TPRM) initiatives. This role is crucial for safeguarding our organization by assessing and mitigating risks associated with our subcontractors and vendors. You will be instrumental in ensuring compliance and operational integrity across our global partnerships.

This position focuses on managing risks related to cybersecurity, data privacy, and operational resilience within our vendor ecosystem. Your expertise will help maintain high standards of security and compliance, supporting our business objectives.

Conduct comprehensive risk assessments for vendors, covering cybersecurity, data privacy, operational, and compliance aspects. Perform thorough vendor due diligence during onboarding and periodic reviews, evaluating provided evidence like SOC reports and ISO 27001 certifications.

Assess vendor adherence to critical security frameworks including ISO 27001, NIST, and SOC 2. Identify security gaps, document findings accurately, and propose effective risk mitigation and remediation plans. Support compliance with global regulations such as GDPR and internal audit requirements.

Manage the entire third-party lifecycle, from onboarding and ongoing monitoring to issue resolution and off-boarding. Utilize GRC or risk management tools to track vendor risks, remediation actions, and exceptions. Collaborate effectively with Procurement, Legal, IT, Privacy, and Business stakeholders, and participate in internal audits and risk governance forums.

A minimum of 6 years of experience is required in Third-Party Risk Management, Vendor Risk Management, Cybersecurity Risk, IT Audit, or GRC roles. A strong grasp of the TPRM lifecycle and various vendor risk frameworks is essential.

Demonstrated hands-on experience with security assessments and control testing is necessary. A solid understanding of core cybersecurity concepts, access controls, incident response, and data protection principles is expected. Excellent analytical abilities, documentation skills, and experience communicating with diverse stakeholders are key.

Proven experience working with global vendors and managing cross-region stakeholder relationships is required. Strong problem-solving skills and the ability to navigate complex risk landscapes are vital for success in this role.