Job Title: Cyber Risk Assessor
Location: Remote
Duration: 12 Months Contract
About the role:
Client is hiring for a large financial services client. You will assess the cybersecurity risk of suppliers, both before a contract is signed and on an ongoing basis. We are adding four assessors, which raises team capacity by about 25% and helps reduce the current on site assessment backlog (roughly four months). Speed and immediate productivity matter, so you will be productive quickly.
What you will do:
Review supplier security controls and evidence
Conduct on site and virtual assessments
Peer review other assessors' work
Validate that suppliers fix the gaps you identify
What you bring:
6+ years in third party or vendor cyber risk assessment, covering pre contract due diligence and ongoing monitoring
Experience reviewing SOC 2, ISO 27001, and pen test evidence, plus control questionnaires such as SIG and CAIQ
Experience performing on site and virtual assessments
Peer review and remediation validation experience
Working knowledge of NIST and ISO frameworks
Nice to have:
Bank or regulated industry third party risk experience, including OCC and FFIEC third party guidance
OneTrust, ProcessUnity, Archer, Prevalent, Whistic, or ServiceNow IRM
Willingness to travel for on site assessments
Preferred certifications:
CTPRP, CISA, CISSP, CISM, or CRISC (any one preferred)