Third-Party Cybersecurity Risk Specialist

Third-Party Cybersecurity Risk Specialist Role Overview We are looking for an experienced cybersecurity professional to evaluate the security posture of external service providers and technology partners.

focuses on identifying potential vulnerabilities, reviewing security controls, assessing technical risks, and supporting informed risk management decisions in a complex business environment. Key

Conduct technical security reviews of external vendors and service providers. Evaluate security controls, technical architectures, data flows, and system integrations to identify potential risks. Review security documentation, audit reports, certifications, penetration test results, and vulnerability assessments.

Assess security measures related to cloud environments, access management, networks, data protection, application security, and incident response. Identify control weaknesses, validate findings with relevant stakeholders, and evaluate proposed remediation actions. Prepare risk assessment reports outlining key findings, their business impact, and recommended improvements.

Collaborate with IT, Legal, Compliance, Procurement, and other teams to support security risk management activities. Contribute to improving assessment procedures, reporting standards, and risk evaluation methodologies. Monitor emerging cybersecurity threats, industry standards, and best practices.

At least 5 years of experience in cybersecurity, technology risk, securi