Third Party Cyber Risk Assessor

About the role

You will assess the cybersecurity risk of suppliers, both before a contract is signed and on an ongoing basis.

We are adding four assessors, which raises team capacity by about 25% and helps reduce the current on site assessment backlog (roughly four months).

Speed and immediate productivity matter, so you will be productive quickly.

What you will do

• Review supplier security controls and evidence
• Conduct on site and virtual assessments
• Peer review other assessors' work
• Validate that suppliers fix the gaps you identify

What you bring

• 6+ years in third party or vendor cyber risk assessment, covering pre contract due diligence and ongoing monitoring
• Experience reviewing SOC 2, ISO 27001, and pen test evidence, plus control questionnaires such as SIG and CAIQ
• Experience performing on site and virtual assessments
• Peer review and remediation validation experience
• Working knowledge of NIST and ISO frameworks