Lead Service Consultant – Supplier Security Due Diligence & Monitoring Service
About The Position
The Supplier Security Due Diligence & Monitoring Service operates at the intersection of Cybersecurity, Legal, Procurement, Supplier Management, and Enterprise Risk Management. The team is responsible for helping the enterprise navigate information security requirements within supplier contracts by providing first-line support during contract negotiations and redline reviews. The Lead Service Consultant serves as a senior practitioner within the specialized service responsible for translating supplier risk assessments into practical contractual security positions. This role partners with stakeholders to evaluate supplier contract language, advise on acceptable contractual outcomes, apply approved fallback language, document security control exceptions, and support governance reviews for non-standard contractual positions. The Lead Service Consultant plays a critical role in balancing supplier risk management with business enablement while maintaining alignment with enterprise risk expectations and supporting consistent service delivery across the organization. Working under the direction of the Service Manager, the Lead Service Consultant serves as a trusted advisor for complex supplier negotiations, contributes to service maturity initiatives, and helps drive operational consistency, quality, and continuous improvement across the service.
Requirements
- Experience supporting third-party risk management, supplier security assessments, cybersecurity governance, technology risk management, procurement, legal operations, or contract management activities.
- Demonstrated ability to interpret complex security requirements and translate technical risk concepts into practical business and contractual guidance.
- Experience working with cross-functional stakeholders including Legal, Procurement, Enterprise Risk Management, and Cybersecurity teams.
- Strong analytical, communication, negotiation, and stakeholder management skills.
- Experience supporting governance processes, exception management, policy interpretation, and control assessment activities.
- Ability to influence decisions, build consensus, and navigate ambiguity in a complex enterprise environment.
Responsibilities
- Provide subject matter expertise and consultation on information security requirements within supplier contracts during contract negotiations and redline reviews.
- Translate supplier risk assessment outcomes into practical contractual security positions and recommend risk-aligned solutions for business stakeholders.
- Review supplier-proposed contractual language and determine alignment with established security requirements, standards, and enterprise risk expectations.
- Apply approved fallback language and assist stakeholders in navigating contractual negotiations involving security controls and requirements.
- Document security control exceptions, risk acceptance decisions, contractual deviations, and non-standard positions in accordance with established governance processes.
- Facilitate escalation and governance review of contractual positions that fall outside approved standards or risk tolerances.
- Partner closely with Cybersecurity, Legal, Procurement, Supplier Management, Enterprise Risk Management, and business stakeholders to support timely and informed contracting decisions.
- Serve as a senior resource for complex supplier security due diligence engagements and contractual risk discussions.
- Support development and maintenance of service procedures, operating guidelines, knowledge articles, templates, and training materials.
- Identify trends, recurring issues, and opportunities for process optimization to improve service effectiveness and stakeholder experience.
- Contribute to service metrics, reporting, quality assurance activities, and continuous improvement initiatives.
Benefits
- Compensation offered for this role is 90,700.00 - 153,925.00 annually and is based on experience and qualifications.
- The candidate(s) offered this position will be required to submit to a background investigation.
- Allstate provides a comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse.
- Employees eligible to work from home also receive a monthly connectivity reimbursement to help offset internet costs.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
