Senior Manager - Third Party Risk Management - Auditing & Consulting Firm

Job Description

- Advance the information security third-party risk management framework and develop risk appetite.

- Develop effective strategies for addressing high-risk suppliers.

- Oversee and perform security risk assessments, business impact analyses, and security control evaluations across third-party vendors in One Trust.

- Prepare risk register in One Trust to monitor and track risks.

- Provide supply chain security assessment remediation oversight and facilitate development of CUECs to document shared responsibility model.

- Perform client MSA security terms and conditions review and provide feedback to legal team.

- Ensure compliance with relevant firm security policies.

Skills Required

Experience with information security risk management framework, assessment, audit and controls based on industry standard frameworks (i.e., NIST; ISO; COSO; Hit rust, FAIR)

- Experience with regulatory requirements (i.e., PCI; GDPR; HIPPA; Privacy; CCPA; etc.)

- Experience using GRC tools and technologies in support of the assessment/audit process (One Trust, Security Scorecard, BitSight, etc.)

- Experience gathering information from a range of different sources to help identify weaknesses in security controls.

- Expert with security control design, development, implementation, and monitoring

- Demonstrated experience across multiple information security domains preferred.