Vendor Jobs

About The Position

Requirements

• Strong knowledge of third-party risk management and vendor security best practices.
• Solid understanding of cybersecurity concepts, security architecture, networks, and IT infrastructure.
• Experience evaluating IT controls and conducting security risk assessments.
• Familiarity with industry security frameworks including: ISO 27001, NIST Cybersecurity Framework (CSF), NIST 800-171
• Knowledge of vulnerability management, enterprise risk management, AI-related security considerations, and governance practices.
• Excellent analytical, organizational, and documentation skills.
• Strong verbal and written communication skills with the ability to communicate effectively across technical teams, business leaders, and executive management.
• Exceptional attention to detail and ability to manage multiple priorities simultaneously.
• 5–7 years of experience in cybersecurity, information security, information risk management, third-party risk management, or IT internal controls.
• Experience leading or supporting vendor security assessment programs.
• Demonstrated success evaluating security controls and recommending effective risk mitigation strategies.
• Experience producing compliance documentation, metrics, executive reporting, and audit support materials.
• Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

Nice To Haves

• Prior leadership or team management experience is preferred.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Business, or a related discipline preferred.
• Industry certifications such as CISSP, CISM, CRISC, CISA, or Security+ are highly desirable.

Responsibilities

• Lead the organization's third-party risk management and vendor security program.
• Manage and oversee vendor security assessments, ensuring compliance with internal policies and regulatory requirements.
• Guide and mentor team members responsible for vendor risk assessments and related security activities.
• Collaborate with business units, vendors, and security stakeholders to remediate identified control gaps and mitigate risk.
• Evaluate third-party security risks and provide recommendations for risk acceptance, mitigation, or remediation.
• Maintain security documentation, including risk assessments, policies, standards, metrics, and compliance records.
• Interpret cybersecurity data to identify potential security, compliance, and operational risks.
• Develop executive-level dashboards and actionable metrics to communicate vendor risk posture.
• Maintain internal procedures, documentation, and program governance materials.
• Respond promptly to vendor security inquiries, compliance requests, and audit activities.
• Support team development through coaching, training, and performance management.

Benefits

• competitive benefit package