3rd party Risk Management Multi in Sacramento​/Hybrid

Job Description

Summary:

Multi Year Ongoing Contract - Mostly remote with some onsite work in Sacramento

Under the direction of the CISO, the Third Party Risk Manager will be responsible for delivering the following:

• Assisting with the establishment of a formal third party risk management program.
• Develop, implement, and execute third party risk management processes in coordination with the Information Security Team, Enterprise Risk Management Office, and the Business Units.
• Perform initial and ongoing risk due diligence activities across all phases of the third party life cycle.
• Identify compensating controls required for third parties, track implementation of those controls, and partner directly with the Business Units to assist with implementation as needed.
• Develop a third party risk dashboard (or other metrics and reporting) in order to provide updates on the status of third party risks to leadership and other stakeholders as needed.
• Qualifications3-5 years progressive and current work experience in third party/supply chain risk management that includes performing Information Security-based risk assessments of third parties and driving mitigation actions sufficient to manage identified risks.
• Strong understanding of complex information security fundamentals and regulatory compliance requirements in the third party risk management domain, and the applicable standards that reflect them (e.g. SOC 2, ISO
  27001, NIST, etc.)
• Demonstrated ability to partner effectively with teams across the Business Units and at various levels ranging from individual contributors to senior leadership.
• Excellent written and verbal skills for communicating complex technical issues and concepts to non-technical audiences.