Third Party Cyber Risk Lead

Key Responsibilities

• Collaborate with threat intelligence teams to identify suppliers affected by emerging cybersecurity threats.
• Design, distribute, and manage targeted supplier security surveys and readiness assessments.
• Follow up with suppliers to ensure timely and complete survey responses.
• Analyze supplier responses to identify security gaps, risks, and potential vulnerabilities.
• Translate survey findings into updated security assessment questionnaires, contract language, and internal security standards.
• Work with cybersecurity, procurement, legal, and vendor management teams to strengthen supplier security.
• Track project milestones, supplier responses, and risk remediation activities.
• Evaluate emerging cybersecurity risks, including AI security, social engineering, and post-quantum cryptography readiness.

Required Qualifications

• 12+ years of experience in third-party cyber risk management, supplier cybersecurity risk, or threat intelligence with a supplier focus.
• Experience designing and executing targeted supplier security surveys.
• Ability to work with threat intelligence teams to identify suppliers exposed to emerging threats.
• Experience translating assessment results into security questionnaires, contractual clauses, and internal standards.
• Strong project management, communication, and stakeholder coordination skills.
• Experience supporting large enterprises, preferably in banking, financial services, insurance, or other regulated industries.