Cyber Risk Management Lead (TPRM)

Aventiv Technologies•,

8h•$102,556 - $116,913•Onsite

About The Position

Responsible for overseeing the Third-Party Risk Management Program (TPRM) including projects and initiatives. Collaborate, Influence cross-functional partnerships across the enterprise to guide the business of third-party cyber risk management.

Requirements

Deep understanding of cybersecurity risk management processes
SME with compliance regulations/laws, security frameworks, and standards (e.g. PCI-DSS, FISMA, NIST, HIPAA, ISO, COBIT, CCPA, HITRUST, etc.)
Strong project management skills and ability to manage multiple projects
Ability to exercise and mentor others on good professional judgment and security-related ethics
Strong attention to detail and highly results oriented.
Excellent communication skills and ability to influence and guide others.
Build and maintain ongoing business relationships with strong interpersonal and communication skills.
10+ years of direct functional knowledge and experience in Third-Party Risk management and contractual arrangements
HS Diploma or GED
Direct functional knowledge and experience in TPRM and contractual arrangements
Process design and process improvement experience
Experience in data gathering, analysis, and problem-solving skills.
Experience with Shared Assessments Standard Information Gathering Questionnaire (SIG) and processes.
Professional certification: with at least one of the following, CISM, CISA, CRISC, CTPRP, CTPRA, CDPSE

Nice To Haves

Bachelors' degree or equivalent work experience in a related discipline
Strong knowledge of various data protection legislation
Professional certification: CISSP with at least one of the following, CISM, CISA, CRISC, CTPRP, CTPRA, CDPSE

Responsibilities

Manage and maintain a comprehensive TPRM framework and roadmap
Track, and measure third-party cyber risk management roadmap with risk prioritization
Design, implement and maintain a consistent approach to all third-party risk to understand inherent risk, residual risk, gaps, and track mitigations
Identify, prioritize, and pursue opportunities to enhance TPRM processes with innovative approaches and solutions to optimize efficiency and effectiveness.
Assess and monitor the TPRM lifecycle activities (risk assessment & due diligent, contract negotiation, ongoing monitoring, and termination)
Establish relevant TPRM policy and procedures
Lead the implementation and continued deployment of the TPRM module within the GRC tool
Assess TPRM controls against regulatory requirements such as PCI, HIPAA, SOC2, NYDFS, privacy, etc. to identify gaps and ensure alignment
Collaborate with the business, legal, and procurement to ensure gaps identified in the TPRM areas are corrected, remediated, and monitored
Drive integration of the TPRM processes into the business and other risk verticals to extend the program to these and other areas
Provide and manage monthly reporting activity and analyzing metrics for performance TPRM program
Provide TPRM training, guidance, and support to all internal customers (e.g. business units, legal, procurement, etc.) and TPRM team members
Leverage industry-leading practices and trends to provide valuable risk insights to senior management
Other Duties as Assigned