Supervisor, IT Security Vendor Risk Management

** _This position follows our hybrid workstyle policy:
Expected to be in a Raymond James office location a minimum of 10-12 days a month._*
* ** _

Please note:

This role is not eligible for Work Visa sponsorship, either currently or in the future._*
* ** Technical Skills/

Experience:

*
* + Foundational experience in IT security, vendor risk management, third party risk, or similar risk functions

+ Working knowledge of core information security and technology risk domains sufficient to review assessments, identify gaps, and escalate complex issues appropriately.

+ Familiarity with internal policies, standards, and common regulatory expectations impacting third party risk management, with the ability to follow established procedures and recognize potential non compliance trends for escalation.

+ Ability to apply basic risk concepts (inherent risk, control effectiveness, residual risk) to support consistent risk ratings and clear, defensible assessment outcomes.

+ Experience reviewing and validating the work of others for completeness, accuracy, and adherence to standards, and providing constructive feedback to improve assessment quality and consistency.

+ Developing people leadership skills, including task prioritization, workload coordination, coaching junior team members, and tracking team deliverables against defined timelines and objectives.

+ Strong written and verbal communication skills, with the ability to summarize assessment results and risks in clear, business appropriate language for stakeholders and management.

** Responsibilities:*
* + Leads a team responsible for conducting risk based due diligence assessments for third party supplier engagements

+ Oversees the evaluation of information security and technology risks associated with vendors, products, and services

+ Ensures vendor risk outcomes align with the firm's risk appetite and regulatory obligations

+ Accountable for the quality, consistency, and timeliness of vendor risk assessments

+ Translates technical and regulatory findings into clear risk conclusions and actionable recommendations

+ Provides guidance and risk insights to business and technology stakeholders

+ Partners closely with Procurement, Legal, IT, and business owners throughout the vendor lifecycle

+ Ensures adherence to internal policies and external regulatory expectations

+ Drives continuous improvement of the vendor risk management program

+ Manages team performance, development, and day to day execution