Vendor / Third-Party Risk Management Specialist

Shift: US Central Time, 7:00 AM 5:00 PM

Job Description

We are looking for a Senior Vendor / Third-Party Risk Management Specialist to support our Vendor Risk Management program.

Key Responsibilities

• Conduct vendor/third-party security risk assessments and due diligence.
• Assess vendor security controls, identify risks, and track remediation.
• Review vendor security documentation and compliance reports.
• Support vendor onboarding, periodic assessments, and risk monitoring.
• Review security requirements in vendor contracts and agreements.
• Work with Security, IT, Procurement, Legal, and business teams.
• Participate in vendor security reviews and stakeholder discussions.

Required Skills

• 5+ years of experience in Third-Party Risk Management, Vendor Risk Management, Information Security Risk, or IT Risk.
• Hands-on experience with vendor security assessments and risk remediation.
• Good understanding of information security controls and risk management.
• Strong communication and stakeholder-management skills.
• Knowledge of NIST / ISO 27001 / SOC 2 is preferred.

Preferred Certifications: CISSP, CISM, CISA, CRISC or equivalent.