Cyber Vendor Risk Specialist

Cboe Global Markets, Inc.; Kansas City (MO); Hybrid; USD 77,000 - 109,000; Full time

Benefits offered by this job

Health, dental & vision benefits

401(k) with match

Tuition assistance

Paid time off & holidays

Employee stock purchase plan

Volunteer opportunities

Job summary

Cboe Global Markets, Inc. is seeking a Third-Party Risk Management Specialist to assess vendor risk, coordinate with security teams, and manage client due diligence questionnaires. The role emphasizes cyber risk within third-party relationships and requires rapid adaptation to evolving priorities.

You will collaborate across business, legal, and IT teams, maintain standardized response libraries, and support regulatory activities while ensuring timely, accurate inquiries are addressed.

Qualifications

• Bachelor’s Degree or equivalent work experience in a relevant field.
• 3+ years’ experience in third-party risk management, vendor management, or security.
• Strong knowledge of cybersecurity principles, frameworks, and regulatory standards.

Responsibilities

• Manage incoming client requests, triage to appropriate teams, and validate NDAs.
• Coordinate with business, legal, technology, and security teams on controls.
• Serve as point of contact for client due diligence inquiries and timely responses.
• Maintain a library of responses for due diligence questionnaires.
• Conduct third-party risk assessments and due diligence reviews.
• Monitor vendor security posture with regular assessments and scans.
• Assist with regulatory exams and remediation planning.

Skills

Vendor risk management

Cybersecurity principles

Documentation & due diligence

Cross-functional collaboration

Regulatory knowledge (NIST SOC 2 GDPR)

Education

Bachelor's degree or equivalent

Tools

Third-party risk platforms

Job description

Cboe Global Markets, Inc. is seeking a Third-Party Risk Management Specialist to assess vendor risk, coordinate with security teams, and manage client due diligence questionnaires. The role emphasizes cyber risk within third-party relationships and requires rapid adaptation to evolving priorities.

You will collaborate across business, legal, and IT teams, maintain standardized response libraries, and support regulatory activities while ensuring timely, accurate inquiries are addressed.