Advisor – Third-Party Risk Management (TPRM)

CGS CyberDefense; West Palm Beach (FL); On-site; USD 90,000 - 120,000; Part time

Benefits offered by this job

Access to cutting-edge cybersecurity tools

Ongoing professional development

A culture that values curiosity and innovation

Job summary

CGS CyberDefense is seeking a part-time Advisor – TPRM in Florida to help clients design and enhance programs that manage cybersecurity risks. The ideal candidate will have over 10 years of experience in cybersecurity and related fields.

The role involves developing frameworks for third-party risk management and conducting vendor assessments, supporting client executives alike in decision-making processes.

Join a collaborative team that values innovation and offers opportunities for professional growth.

Qualifications

• 10 plus years of professional experience in cybersecurity, risk management, or vendor/third-party risk roles.
• Solid understanding of third-party risk management concepts, due diligence processes, and control assessment methodologies.
• Familiarity with frameworks such as NIST CSF, ISO 27036, SOC 2, SIG, and shared responsibility models.

Responsibilities

• Support third-party cybersecurity risk assessments and vendor due diligence engagements.
• Assist in developing TPRM frameworks, governance models, and operating procedures.
• Evaluate vendor control environments using assessments.

Skills

Communication skills

Project management

Client advisory

Analytical skills

Visualization skills

Tools

ServiceNow VRM

Archer

OneTrust

CyberGRX

Excel

Power BI

Job description

Advisor – Third-Party Risk Management (TPRM)

At CGS CyberDefense, we’re more than a cybersecurity firm — we’re a team of innovators, problem-solvers, and trusted advisors protecting some of the world’s most valuable enterprises.

Description

CGS CyberDefense is seeking an experienced Advisor – TPRM Part-Time to help clients design, implement, and mature programs that assess and manage cybersecurity risk across vendors, suppliers, and other third parties. This role provides advisory support to client executives and cross-functional teams, translating vendor risk requirements into practical oversight frameworks and actionable strategies.

Responsibilities

• Support third-party cybersecurity risk assessments and vendor due diligence engagements across industries and regulatory environments
• Assist in developing and operationalizing TPRM frameworks, governance models, and operating procedures
• Evaluate vendor control environments using assessments
• Support vendor segmentation, criticality classification, and continuous monitoring of risk profiles
• Support and optimize technology enablement for TPRM programs using platforms
• Coordinate communication between procurement, security, and compliance teams to enhance vendor governance
• Prepare executive-facing deliverables including dashboards, risk summaries, and reports for decision-making
• Contribute to practice and methodology development, mentor junior consultants, and support thought leadership in TPRM

Qualifications

• 10 plus years of professional experience in cybersecurity, risk management, or vendor/third-party risk roles li>
• Solid understanding of third-party risk management concepts, due diligence processes, and control assessment methodologies
• Familiarity with frameworks and standards such as NIST CSF, ISO 27036, SOC 2, SIG, and shared responsibility models
• Strong communication, project management, and client advisory skills

Desired Experience

• Experience with TPRM automation tools (ServiceNow VRM, Archer, OneTrust, CyberGRX, etc.)
• Knowledge of regulatory requirements impacting vendor risk (e.g., OCC, HIPAA, GDPR, CMMC)
• Strong analytical, reporting, and visualization skills (Excel, Power BI, or similar tools)
• Ability to manage multiple client engagements in fast-paced consulting environments

What We Offer

• An opportunity to work with leading enterprises across industries.
• Access to cutting-edge cybersecurity tools and technologies.
• Ongoing professional development and training opportunities.
• A culture that values curiosity, collaboration, and innovation.

Why Choose CGS CyberDefense

• Mission-Driven Work – Protecting high-value enterprises from today’s most complex threats.
• Team of Experts – Collaborate with skilled cybersecurity professionals who support your growth.
• Innovation First – A culture where new ideas are encouraged and rewarded.
• Commitment to You – Your success is our success, and we invest in your development.