Cloudflare9 дней назад

Security Third Party Risk Management Lead

Зарплата не указана

РЫНОК

14 534 ₽медиана по профессии

Tech Lead / Team Lead · 64 вакансий с указанной зарплатой

5 250половина предложений: 11 312–19 1671,2 млн

Работодатель не указал зарплату — сравните с рынком сами.

Austin

Обязанности

01Own and drive the operational execution of our third party risk management program — vendor risk assessments, security contract terms, and continuous monitoring
02Serve as the subject matter expert and go-to technical resource for vendor security review methodology, vendor tiering, and risk treatment decisions
03Lead the vendor risk assessment process day to day, applying and refining the security policies and standards
04Proactively identify inefficiencies in vendor security workflows and propose and implement improvements
05Coordinate the team's operational work — running check-ins with the specialists to drive assessments, escalations, and projects
06Provide technical guidance and mentorship to Third Party Risk Management Specialists on assessment methodology, risk decisions, tooling, and best practices
07Make timely, well-reasoned decisions on risk findings and policy exceptions
08Support negotiation of security contract terms with vendors by maintaining guidance for Contracts/Legal teams and helping resolve contract escalations
09Act as a primary point of coordination with Sourcing, Contracts, Legal, Privacy, and Security teams across the vendor lifecycle
10Support the design, implementation, and improvement of Procurement/GRC tools and AI workflows
11Report on third party risk posture and program operations to the Director, Information Security GRC, and security leadership

01Experience typically gained in 8+ years working in Security GRC
02Deep, hands-on expertise operating a third party / vendor risk program end to end
03Subject-matter expertise across security control frameworks — ISO 27001, SOC 2, PCI, NIST 800-53
04Solid understanding of security contract terms and vendor negotiation support
05Demonstrated ability to mentor peers and provide technical guidance
06A track record of identifying process inefficiencies and driving operational improvements at scale
07Strong ability to influence and coordinate across cross-functional teams
08Strong organizational, analytical, and interpersonal skills