Third-Party Cybersecurity Risk Specialist

Role Overview

We are looking for an experienced cybersecurity professional to evaluate the security posture of external service providers and technology partners. The role focuses on identifying potential vulnerabilities, reviewing security controls, assessing technical risks, and supporting informed risk management decisions in a complex business environment.

• At least 5 years of experience in cybersecurity, technology risk, security engineering, security architecture, or a related field.
• Proven experience conducting technical security assessments and evaluating the effectiveness of security controls.
• Bachelor's degree in Cybersecurity, IT, Information Systems, or a related discipline.
• Strong knowledge of cloud platforms, SaaS solutions, identity and access management, network security, vulnerability management, and data protection.
• Understanding of application security, security monitoring, logging, and incident response.
• Familiarity with security frameworks and standards such as NIST CSF, NIST SP 800-53, ISO 27001, and SOC 2.
• Ability to critically assess technical documentation, identify security gaps, and independently evaluate risk.
• Strong analytical and communication skills, including the ability to present technical findings to both technical and business audiences.
• Ability to manage multiple assessments independently and work effectively with cross-functional teams.
• High level of integrity and professional ethics.