Description

Own third-party risk assessments, security project delivery, and data automation initiatives to strengthen the vendor risk management program.

This role is on-site.

Responsibilities

• Conduct security assessments using vendor questionnaires and define risk levels based on local control environments.
• Lead end-to-end delivery of information security projects, from design and testing to implementation and maintenance.
• Develop and implement corrective actions, formalizing plans in the system of record and verifying mitigation steps with providers.
• Design and maintain KPI dashboards to monitor third-party risk performance and drive continuous improvement.
• Extract, transform, and load (ETL) data using SQL and Python-pandas to support automation and analysis.

Required Skills

• 6+ years in information security or risk management, including 2+ years delivering security projects.
• Proficiency with vendor risk frameworks: NIST CSF, ISO 27001, SIG.
• Experience with security questionnaires such as SIG and CAIQ.
• Scripting competency in PowerShell, Python, or equivalent.
• ETL tools experience: SQL, Alteryx, Python-pandas.
• Fluent written and spoken English and Spanish.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent work experience.

Preferred Skills

• Certifications: CISSP, CISA, CRISC, or Certified Third-Party Risk Professional (CTPRP).
• Strong stakeholder management and ability to convey complex security concepts concisely.

Key Skills

Education

Bachelor's degree