AVP - Third Party Risk Management - Information Security

This role will be responsible for third party and partner IT risk management globally

Key responsibilities of this role would be

Formalize third party and partner risk management framework from an information security perspective

Execute risk management processes for new and existing third parties and partners, leveraging external teams or contractors as necessary

Ensure framework and processes are integrated with broader organizational supplier risk management and other ERM processes

Oversee implementation and utilization of Third Party Risk Management module of Archer

Work closely with other groups in Information Security and other functions to ensure tight integration with broader processes (e.g. metrics, incident management, audits)

Present on third party risk management process to clients and auditors

Requirements

Strong knowledge of third party risk management concepts

Technical security knowledge across IT and cloud technologies

Knowledge of key security and compliance frameworks ISO 27001, NIST, HIPAA, SSAE 16 etc

Excellent verbal and written communication skills

Certifications like CISSP, CISA, CISM preferred