Third-Party Cybersecurity Risk Specialist

Third-Party Cybersecurity Risk Specialist

Role Overview

We are looking for an experienced cybersecurity professional to evaluate the security posture of external service providers and technology partners. The role focuses on identifying potential vulnerabilities, reviewing security controls, assessing technical risks, and supporting informed risk management decisions in a complex business environment.

Key Responsibilities

• Conduct technical security reviews of external vendors and service providers.
• Evaluate security controls, technical architectures, data flows, and system integrations to identify potential risks.
• Review security documentation, audit reports, certifications, penetration test results, and vulnerability assessments.
• Assess security measures related to cloud environments, access management, networks, data protection, application security, and incident response.
• Identify control weaknesses, validate findings with relevant stakeholders, and evaluate proposed remediation actions.
• Prepare risk assessment reports outlining key findings, their business impact, and recommended improvements.
• Collaborate with IT, Legal, Compliance, Procurement, and other teams to support security risk management activities.
• Contribute to improving assessment procedures, reporting standards, and risk evaluation methodologies.
• Monitor emerging cybersecurity threats, industry standards, and best practices.

Requirements

• At least 5 years of experience in cybersecurity, technology risk, security engineering, security architecture, or a related field.
• Proven experience conducting technical security assessments and evaluating the effectiveness of security controls.
• Bachelor's degree in Cybersecurity, IT, Information Systems, or a related discipline.
• Strong knowledge of cloud platforms, SaaS solutions, identity and access management, network security, vulnerability management, and data protection.
• Understanding of application security, security monitoring, logging, and incident response.
• Familiarity with security frameworks and standards such as NIST CSF, NIST SP 800-53, ISO 27001, and SOC 2.
• Ability to critically assess technical documentation, identify security gaps, and independently evaluate risk.
• Strong analytical and communication skills, including the ability to present technical findings to both technical and business audiences.
• Ability to manage multiple assessments independently and work effectively with cross-functional teams.
• High level of integrity and professional ethics.