Skip to main content

About the role

Third Party Risk Management Consultant The hiring manager has 2 engineers on his team. He had a Third Party Risk Manager that left, so now he has one engineer doing 30% of that role. They need to do 200 assessments this year and are only at 75, so they are very behind. He needs external help and does not have time to train!
Must haves:
  • Must have 5+ years in IT Security in security for 5+ years.
  • Must have 3+ years of Vendor Risk Management experience.
  • This person must have technical expertise as well and excellent communication skills as they will be working with vendors.
  • Must be experienced with SOC II TYPE II Report. Need to understand and know security reports. They need to understand the reports and assess and ask follow up questions to discover the assessment. They will get these reports and need to correlate, assess and define a vendor portfolio.
  • Technology background. Need to know BCP and how the vendor management works. They need to know batching cadences. Need to know the operations systems background.
  • Soft Skills:
  • Excellent communication skills
  • Self Starter
  • Process Oriented
Plus: CISSP certCRISC certification
Location: Remote - Preferably central timezone.

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this