Job Title: Third Party Cyber Risk Lead
Location: Remote
You will help run the supplier cybersecurity risk program for a large financial services client. You lead targeted security surveys of suppliers in response to emerging threats, such as AI vulnerability readiness, social engineering at law firms, or post quantum readiness.
What you will do
- Partner with threat intelligence to identify which suppliers are affected
- Design and send surveys, then follow up on responses
- Turn results into updated assessment questions, contract language, and internal security standards
What you bring
- 6+ years in third party cyber risk or threat intelligence with a supplier focus
- Experience designing and running targeted supplier surveys, such as emerging threat or readiness surveys
- Ability to work with a threat intelligence team to identify affected suppliers
- Experience turning results into updated questionnaires, contract language, and standards
- Strong project and follow up discipline
Nice to have
- Knowledge of emerging topics such as AI risk, post quantum, and social engineering in the legal sector
- Contract or procurement clause experience
- Survey tools such as Qualtrics, SurveyMonkey, or OneTrust
Preferred certifications: CTPRP, CISA, or CISSP (any one preferred)
Technology and frameworks
Survey tools such as Qualtrics, SurveyMonkey, and OneTrust, plus threat intelligence inputs on emerging supplier risks.
Background we look for
Experience in a large financial services or other regulated enterprise (bank, insurer, card issuer, asset manager) is strongly preferred. Consulting experience from a Big 4 firm or managed security provider is welcome when you were embedded with an enterprise team.