Vendor Information Security Risk Management Specialist

We are seeking a highly skilled and motivated Vendor Information Security Risk Management Specialist to join our team. This individual will be responsible for evaluating and tracking information security risks posed by third-party vendors and partners. As part of the Governance & Compliance (G&C) team, you will collaborate with various stakeholders to ensure the integrity, confidentiality, and availability of our data and systems when interacting with external entities.

Key Responsibilities:

• Evaluate and assess security risks associated with third-party vendors.
• Develop and maintain a vendor risk management framework.
• Collaborate with internal teams to ensure compliance with security policies and standards.
• Monitor and report on vendor security performance and risk exposure.
• Conduct regular audits and assessments of vendor security practices.
• Provide guidance and support to stakeholders on vendor security requirements.

Required Skills & Qualifications:

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 5-8 years of experience in information security, risk management, or compliance.
• Strong understanding of vendor risk management frameworks and methodologies.
• Experience with security assessment tools and techniques.
• Excellent communication and interpersonal skills.
• Relevant certifications such as CISSP, CISM, or CRISC are a plus.

What we offer:

• A dynamic work environment with a focus on professional growth.
• Opportunities to collaborate with cross-functional teams.
• A chance to make a significant impact on our information security posture.