Cyber Risk & Vendor Security Specialist

Cboe Global Markets, Inc.; Overland Park (KS); On-site; USD 77,000 - 109,000; Full time

Benefits offered by this job

Health, dental and vision benefits

401(k) match

Paid time off

Tuition assistance

Parental leave

On-site gym

Job summary

Cboe Global Markets, Inc. invites qualified professionals to join its Global Third-Party Risk Management team in the United States. The role focuses on executing the risk program for third-party vendors and service providers, with emphasis on cyber threats within the vendor ecosystem.

You will coordinate cross‑functionally to validate responses, maintain a library of standard replies, and support onboarding of new vendors while monitoring security posture and enabling regulatory inquiries.

Qualifications

• Bachelor’s Degree or equivalent work experience in a relevant field.
• 3+ years’ experience in third-party risk management, vendor management, security incident response, cyber management or comparable field required.
• Strong understanding of cybersecurity principles, including application security, access control, and incident response.
• Knowledge of compliance and regulatory frameworks (e.g., NIST, SOC 2, GDPR, ISO 27001).
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross‑function teams.
• Ability to work independently and manage multiple assignments/projects simultaneously.
• Experience conducting vendor risk assessments.
• Experience with third party/vendor risk management platforms is a plus.

Responsibilities

• Manage incoming client requests (assessments, questionnaires, etc.), prioritize and triage to appropriate teams, and validate NDAs.
• Coordinate between business, legal, technology, and security teams to validate questionnaire responses and fulfill requests.
• Serve as a point of contact for internal stakeholders for client due diligence inquiries.
• Act as SME for the response management software used for client due diligence questionnaires.
• Maintain a standardized library of responses for due diligence questionnaires for accuracy and consistency.
• Collaborate with internal experts to update responses as needed.
• Assist with onboarding new vendor relationships.
• Collect, review, and process information and documentation from third party vendors/suppliers.
• Conduct third-party risk assessments and due diligence reviews; report findings to senior team members.
• Perform comprehensive security reviews of potential and existing vendors using questionnaires and tools.
• Analyze identified risks and create remediation plans; prioritize by impact and likelihood.
• Monitor vendors’ security posture through assessments, scans, and incident reporting.
• Coordinate with internal security to respond to cyber incidents involving vendors.

Skills

Third-party risk management

Vendor management

Security incident response

Cybersecurity management

Education

Bachelor’s Degree or equivalent

Tools

Vendor risk management platforms

Job description

Cboe Global Markets, Inc. invites qualified professionals to join its Global Third-Party Risk Management team in the United States. The role focuses on executing the risk program for third-party vendors and service providers, with emphasis on cyber threats within the vendor ecosystem.

You will coordinate cross‑functionally to validate responses, maintain a library of standard replies, and support onboarding of new vendors while monitoring security posture and enabling regulatory inquiries.