Cyber Security Risk Manager

Job Summary

Leading the IT and Third-Party Risk Management (TPRM) program, the full-time Cyber Security Risk Manager will manage the end-to-end risk assessment lifecycle, develop TPRM policies, and collaborate with various teams to ensure compliance with security standards in a remote environment.

Key responsibilities

• Lead the third-party risk assessment lifecycle, including onboarding, reviews, and offboarding
• Develop and maintain TPRM policies and procedures aligned with regulatory standards
• Conduct risk assessments for vendors and report on third-party risk metrics to senior leadership

Required qualifications

• Minimum 5 years of experience in Third-Party Risk Management within an IT Security or GRC function
• Strong understanding of risk frameworks and regulatory requirements (e.g., PCI, NIST, ISO 27001)
• Hands-on experience with GRC platforms such as AuditBoard and Archer
• Bachelor's or equivalent degree in a field related to IT
• Relevant certifications (e.g., CTPRP, CISA, CISSP, CRISC) are a plus