Cybersecurity- TPRM Assessor

About the role

We are looking for an experienced 3PCRM Assessor to perform third-party cybersecurity risk assessments, evaluate vendor security controls, review evidence, conduct SME interviews and walkthroughs, and prepare assessment findings and final reports. The role requires strong knowledge of cybersecurity controls, risk frameworks, and third-party security assessment methodologies.

What you'll do

• Perform end-to-end third-party cybersecurity assessments in accordance with established assessment methodology and risk requirements
• Conduct engagement and/or application-specific remote assessments based on defined scope
• Review vendor security questionnaires, supporting documentation, policies, procedures, and evidence
• Compare current Control Assessment (CA) vendor responses with previous assessments to identify and document changes in the vendor's control environment
• Identify control gaps, risk observations, and changes in the vendor's security posture

What you need

• Cloud security
• Penetration testing
• Risk management
• Vulnerability assessment
• Incident response
• IAM

Good to have

• CISA
• CISSP
• CISM
• ISO 27001