Security Consultant

Job Title: Security Consultant

Job Summary

We are seeking a Security Consultant Contract ISA Negotiator to manage end-to-end negotiations and execution of Information Security Agreement (ISA) amendments with third-party vendors. The role focuses on incorporating AI and Technology Lifecycle Management (TLM) security requirements into vendor contracts while ensuring alignment with enterprise security, data protection, and third-party risk management standards.

The ideal candidate will have experience in contract negotiations, vendor risk management, information security, or technology agreements, with the ability to resolve contractual disputes and collaborate with Legal, Third-Party Cyber Risk Management (TPCRM), business stakeholders, and vendors.

Key Responsibilities

• Lead end-to-end negotiations and execution of ISA amendments with third-party vendors, leveraging AI-enabled tools where applicable.
• Drive the adoption of Clients standard AI and TLM security clauses across vendor agreements.
• Assess vendors’ AI usage, data handling practices, and associated security risks to determine appropriate contractual requirements.
• Negotiate vendor objections concerning AI governance, information security, data protection, privacy, and contractual risk provisions.
• Partner with Legal, TPCRM, business stakeholders, and vendor representatives to achieve timely, risk-aligned negotiation outcomes.
• Manage multiple concurrent negotiations while meeting defined productivity, turnaround time, and quality targets.
• Maintain accurate negotiation trackers, document contractual decisions, and monitor progress against project milestones.
• Identify stalled negotiations and high-risk contractual exceptions, escalating them with clear recommendations.
• Support delivery of initiative milestones through December 31, 2026.

Required Qualifications

• 2–5 years of experience in contract negotiation, contract management, vendor agreements, or commercial contracting.
• Experience with technology, information security, data protection, privacy, or third-party agreements is preferred.
• Working knowledge of information security principles, data protection requirements, and third-party risk management.
• Strong negotiation, stakeholder management, communication, and problem-solving skills.
• Ability to manage multiple vendor negotiations simultaneously in a deadline-driven environment.
• Strong documentation, tracking, escalation, and follow-up skills.
• Ability to understand contractual language, evaluate vendor objections, and recommend practical risk-based resolutions.
• Accurate documentation and achievement of project milestones.