Third Party Risk Management-Subcontractor

About the role

Hands‑on experience with security assessments and control testing. Experience working with global vendors and cross‑region stakeholders.

What you'll do

• Conduct inherent and residual risk assessments for vendors across cybersecurity, data privacy, operational, and compliance domains
• Perform vendor due diligence during onboarding and periodic reviews
• Review vendor‑provided evidence (SOC reports, ISO 27001, SIG, penetration test summaries, etc.)
• Assess vendor alignment with security frameworks such as ISO 27001, NIST, SOC 2, and HP internal security policies
• Identify gaps, document findings, and recommend risk mitigation and remediation plans

What you need

• 6–11 yrs of experience
• Risk management
• Internal audit
• Data privacy
• Compliance
• ISO 27001
• Due diligence
• Any graduate

Good to have

• Incident response