Cybersecurity Risk Program Manager

Job Summary

As a full-time remote Cybersecurity Risk Program Manager, the successful candidate will manage third-party risk assessments, track control gaps and remediation efforts, and collaborate with various business units to address security issues across the vendor ecosystem.

Key responsibilities

• Conduct security risk assessments for third parties throughout the vendor lifecycle
• Identify, document, and drive remediation of security risks and control gaps
• Monitor high-risk vendors for compliance and risk signals

Required qualifications

• 5+ years of experience in governance, risk, and compliance (GRC), including vendor risk management
• 2+ years of experience conducting security or third-party risk assessments
• Bachelor's degree in Information Security, Computer Science, Risk Management, Business, or a related field
• Solid understanding of third-party risk management processes and frameworks
• Familiarity with GRC/TPRM platforms and security ratings services