Third Party Cyber Risk Lead

About the role

You will help run the supplier cybersecurity risk program for a large financial services client.

You run the operational side of the program, from audit findings to supplier requirements and assessment questions.

What you will do

• Manage audit and regulatory findings and their remediation plans
• Support internal audit and examiners
• Maintain the security requirements suppliers must meet and the assessment questions used to test them
• Keep both aligned to security standards and industry frameworks, such as NIST

What you bring

• 8+ years in cyber risk or GRC, with 4+ years in third party risk
• Ownership of audit and regulatory findings and remediation plans
• Experience supporting internal audit and examiner requests
• Experience maintaining supplier security requirements and assessment question sets mapped to NIST CSF, NIST 800 53, and ISO 27001
• Leadership and influence skills

Nice to have

• Bank regulator exam experience with the OCC, FRB, or FFIEC
• Familiarity with FS ISAC and Shared Assessments (SIG)
• Program or operating model design

Preferred certifications: CTPRP, CISA, CISSP, CISM, CRISC. Regulated bank experience is highly valued.