Information Security Advisor

Lyra Technology Group•Brentwood, TN

4d•$86,000 - $90,000•Hybrid

About The Position

ImageQuest is seeking an Information Security Advisor for its Advisory Services team. The role focuses on delivering and strengthening clients’ vendor management programs, including for clients in regulated industries such as banking and healthcare. The Advisor partners with client advisors to build audit- and exam-ready programs and supports the team through day-to-day guidance, quality review, process documentation, and technology-enabled improvements. The position is suited to an experienced third-party risk practitioner who is organized, methodical, detail-oriented, and interested in potentially expanding into broader Advisory Services over time. The Advisor develops and maintains vendor and third-party risk components of client information security programs; creates and upholds vendor management policies and procedures; oversees due diligence from intake through completion; evaluates vendor documentation; classifies vendor risk; and coordinates recurring assessments and reviews. The role also maintains client vendor and application inventories and vendor management systems, prepares executive summaries, supports audits and exams, identifies incidents requiring escalation, and helps ensure consistent, timely, high-quality team deliverables. The role is based in Brentwood, Tennessee, and operates on a hybrid basis. Base compensation is $86,000–$90,000. Once the Vendor Management Program is running consistently, the position offers a defined path to expand into broader ImageQuest Advisory Services, including vCISO and Information Security Officer programs, risk assessments, policy development, incident response tabletop exercises, and AI risk advisory, with shadowing and cross-training support.

Requirements

At least 3 years of hands-on vendor management or third-party risk management experience, including vendor due diligence, risk classification, annual reviews, and SOC report evaluation.
Experience planning and developing policies, procedures, and standards.
Consultative, risk-based approach to security and process, with the ability and desire to work directly with clients.
Ability to manage a high volume of deliverables across multiple clients with competing deadlines.
Strong organizational skills and attention to detail.
Strong analytical and problem-solving skills, initiative, judgment, and discretion.
Clear, concise written and verbal communication and a calm, composed demeanor under pressure.
Ability to work independently on tasks requiring patience, thoroughness, and quality, and to work well as part of a team.
Proficiency with standard business software.

Nice To Haves

Bachelor’s degree desired; advanced degree is a plus.
Additional information security, IT audit, compliance, or risk management experience.
Vendor management experience in a regulated industry such as banking, healthcare, or insurance.
Experience with vendor management platforms such as Nvendor/Ncontracts.
Knowledge of security concepts related to IT infrastructure.
Preferred certifications include CTPRP, CISA, CISM, CISSP, or Security+.

Responsibilities

Develop and maintain vendor and third-party risk components of each client’s Information Security Program, supporting the designated CISO or Information Security Officer as needed.
Develop and uphold written vendor management policies and procedures, focusing on new vendor onboarding and ongoing monitoring.
Initiate due diligence based on client engagement requests and manage follow-up through completion.
Obtain and evaluate vendor documentation, including SOC reports, contracts, and financial statements.
Classify vendors according to their potential risk to the client and document the rationale for each classification.
Coordinate and conduct annual reviews and risk assessments for critical and selected non-critical vendors, recommending follow-up actions.
Maintain accurate, current vendor and application lists for each client and keep the vendor management system current for assigned accounts.
Prepare executive summaries on vendor performance, compliance status, and concerns or improvement areas.
Assist Principals and Senior Advisors with vendor-related bank exam and audit requests, inquiries, and narratives.
Recognize vendor incidents or breach notifications requiring escalation and promptly escalate them for assigned clients.
Maintain regulatory knowledge, including GLBA, HIPAA, and interagency third-party risk guidance.
Serve as the day-to-day point of contact for team members’ vendor management questions.
Coordinate the team’s due diligence work and guide consistent execution across client assignments.
Review vendor management deliverables before they are sent to clients and provide clear, constructive peer feedback.
Track recurring reviews and flag work at risk of missing deadlines.
Coordinate with Information Security Subject Matter Experts to clarify client assignments and ensure accurate reporting.
Develop and maintain structured vendor management processes and documentation, including use of platforms such as Nvendor.
Contribute to process improvements using AI and other technologies.
Participate in process improvement meetings and on-site client focus groups as needed.
Provide professional, helpful client service in interactions with clients and employees.
Respond to emails, phone calls, and Microsoft Teams messages in a timely and efficient manner.
Participate in on-site client visits, off-site client events, webinars, and training as needed.
Collaborate with internal departments to meet goals and maintain client satisfaction.
Take ownership of vendor management work from intake through final deliverable, keep multiple client deadlines on track, and maintain high standards for deliverables.