Cyber Risk Consultant

Job Summary

A company is looking for a Digital Third Party Cyber Risk Consultant - Technical Architect.

Key Responsibilities

• Monitor and interpret cybersecurity laws and regulations, ensuring compliance and collaboration with legal teams
• Perform in-depth information security risk assessments of third-party vendors and identify security gaps
• Prepare and present reports on risk and compliance status to stakeholders and oversee ongoing monitoring of vendors

Required Qualifications, Training, and Education

• Bachelor's degree in a relevant field is required; advanced degree in Cyber Law or related field is highly desirable
• 5-8 years of experience in information security, risk management, or compliance in regulated environments
• Professional certifications such as CISSP, CISM, CISA, or CRISC are strongly preferred
• Strong understanding of regulations (FINRA, NYDFS) and frameworks (NIST, MITRE, CSA)
• Ability to manage multiple projects and deadlines effectively