Information Security – Third-Party Risk management consultant

Develop and implement robust third-party risk management (TPRM) frameworks, policies, and procedures tailored to the organization's risk appetite. Conduct comprehensive risk assessments of potential and existing third-party vendors, evaluating their security posture, compliance, and operational resilience. Analyze vendor security documentation, including SOC reports, penetration test results, and privacy policies, to identify and quantify potential risks. Define and manage security requirements and contractual clauses for third-party engagements, ensuring alignment with regulatory obligations and industry best practices. Desired Candidate Profile 5–8 years of experience in Information Security, Cybersecurity, IT Risk, or Third-Party Risk Management. Strong knowledge of TPRM / Vendor Risk Management. Experience with security frameworks such as ISO 27001, NIST, CIS Controls, and COBIT. Understanding of cloud security, data privacy, IAM, network security, vulnerability management, and business continuity. Experience reviewing SOC reports, ISO certificates, penetration testing reports, and security questionnaires. Knowledge of risk assessment and GRC tools. Strong analytical, documentation, and stakeholder management skills. Relevant certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 are preferred. Employment Type Full Time