Third-Party and AI Vendor Risk Specialist

• Assess and monitor technology, cybersecurity, resilience and AI risks introduced by third parties and AI-enabled services.

Years of experience: 7+ years

Required start date: Immediate

• Assess and monitor technology, cybersecurity, resilience and AI risks introduced by third parties and AI-enabled services.

• Perform inherent-risk screening and detailed due diligence for technology and AI vendors.
• Assess security, privacy, resilience, subcontractor and AI-governance controls.
• Document residual risks, contractual control requirements and remediation actions.
• Monitor vendor risk throughout the lifecycle, including renewals and material changes.
• Prepare risk decisions and evidence for governance forums.

• Third-party risk management
• Cybersecurity and cloud due diligence
• AI vendor/model risk
• Contract-control review
• Operational resilience and data privacy
• Risk reporting

• Relevant delivery experience in the stated domain.
• Experience working with multidisciplinary technology, risk and business stakeholders.
• Regulated financial-services experience is preferred.

• Completed vendor assessments with evidence-based ratings
• Residual-risk and remediation records
• Contractual control requirements and monitoring plan

• CISA, CRISC, CISSP, CTPRP or equivalent preferred
• ISO/IEC 27001 and ISO/IEC 42001 knowledge desirable

• TPRM/GRC platform
• Microsoft 365
• Power BI