Senior TPRM - GRC Consultant

Senior TPRM and GRC Consultant
Third-Party Risk Management Specialist

Work Arrangement: Hybrid, 2-3 days onsite

Location: Plano Texas or McKinney Texas

Start Date: Immediate

IT Third-Party Risk Management professional to lead and strengthen the TPRM program within the Governance, Risk, and Compliance function.

• This position manages the complete third-party risk lifecycle, including vendor onboarding, due diligence, risk assessments, periodic reviews, remediation tracking, ongoing monitoring, and offboarding.
• The ideal candidate has extensive experience evaluating technology vendors, identifying security and compliance risks, improving TPRM processes, and working independently with business and technical stakeholders.
• Hands-on Audit Board experience is strongly preferred, although candidates with strong RSA Archer experience will also be considered.

• Lead the end-to-end third-party risk management lifecycle for new and existing vendors.
• Conduct vendor due diligence, security risk assessments, control reviews, and periodic reassessments.
• Evaluate vendor compliance with organizational security requirements and regulatory and industry standards.
• Identify control gaps, document risk findings, recommend corrective actions, and track remediation through completion.
• Develop, maintain, and improve TPRM policies, procedures, assessment methodologies, workflows, and supporting documentation.
• Partner with Procurement, Legal, Information Security, Compliance, and business teams to incorporate security requirements into vendor selection and contracting.
• Maintain and optimize Audit Board or RSA Archer for vendor assessments, workflow management, documentation, issue tracking, and reporting.
• Monitor third-party risk metrics, emerging trends, remediation progress, and overall compliance posture.
• Prepare risk reports, dashboards, and program updates for senior leadership.
• Support internal and external audits involving third-party risk, cybersecurity governance, and regulatory compliance.
• Stay current with emerging cybersecurity threats, regulatory changes, and third-party risk management best practices.

• Minimum of five years of direct Third-Party Risk Management experience within an IT Security, Cybersecurity, Risk Management, or GRC function.
• Demonstrated experience managing vendor onboarding, due diligence, risk assessments, control-gap identification, remediation tracking, periodic reviews, and offboarding.
• Strong knowledge of cybersecurity frameworks, control standards, and regulatory requirements, including NIST, ISO 27001, SOC 2, PCI DSS, HIPAA, and CCPA.
• Hands-on experience with Audit Board, RSA Archer, or a comparable GRC platform.
• Experience partnering with Procurement, Legal, Compliance, Information Security, and business stakeholders.
• Strong analytical, documentation, reporting, communication, and stakeholder-management skills.
• Ability to work independently, manage competing priorities, and deliver results in a fast-paced environment.
• Ability to work onsite Wednesday through Friday.

• Hands-on experience configuring or optimizing Audit Board TPRM workflows.
• Experience developing, implementing, or maturing an enterprise Third-Party Risk Management program.
• Experience creating executive-level risk reports, dashboards, and metrics.
• CTPRP, CISA, CISSP, CRISC, or another relevant risk or cybersecurity certification.

Estimated Min Rate
: $50.00

Estimated Max Rate
: $65.00

We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh’s network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh’s extensive talent…