Third-Party Risk Management (TPRM) Specialist

We are seeking a Third-Party Risk Management Specialist to assess, monitor, and manage cybersecurity and privacy risks associated with vendors, suppliers, and business partners.

Requirements

• Conduct comprehensive security and privacy risk assessments for new and existing third-party vendors
• Implement continuous monitoring programs for vendor security posture and threat intelligence
• Manage vendor risk registers and maintain risk profiles throughout vendor relationship lifecycles
• Develop and negotiate security requirements, SLAs, and contractual risk allocation clauses
• Ensure vendor compliance with regulatory requirements (GDPR, CCPA, HIPAA, SOX) and industry standards
• Coordinate remediation activities for identified vendor security deficiencies and gaps
• Establish risk-based vendor categorization and tiered assessment approaches
• Develop comprehensive TPRM policies, procedures, and governance frameworks
• Establish vendor security standards and minimum security requirements for different risk tiers
• Create vendor onboarding and offboarding security procedures including data return and destruction
• Implement supply chain threat intelligence and geopolitical risk monitoring programs