Cybersecurity Supplier Assessor - Third-Party Risk

Siemens Energy, Inc.; Orlando (FL); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health and wellness benefits

Paid time off

401K with company match

Family building benefits

Parental leave

Job summary

Siemens Energy, Inc. is seeking a Cybersecurity Supplier Assessor to protect our cybersecurity posture by evaluating the controls of suppliers and partners.

You will lead risk assessments, translate requirements into practical supplier controls, and support remediation plans within procurement, legal, and security teams. You will apply ISO 27001, NIST, and other frameworks while monitoring regulatory changes and promoting robust supplier risk management across the organization.

Qualifications

• 5+ years of experience in information security auditing, cybersecurity risk assessment, or third-party risk management.
• Strong understanding of risk management methodologies and frameworks (ISO 27001, NIST, COBIT).
• Knowledge of U.S. federal compliance, supply chain security, export controls, and remediation planning in supplier programs.

Responsibilities

• Conduct comprehensive cybersecurity assessments of third‑party suppliers, evaluating controls, policies, and risk posture.
• Collaborate with Procurement, Legal, and Information Security to develop remediation plans and monitor risks.
• Interpret contracts to ensure cybersecurity protections and compliance obligations are included.
• Apply security standards and regulatory requirements to assess supplier compliance and benchmarking.
• Monitor evolving threats and regulatory developments to improve assessment methodologies.
• Communicate assessment outcomes and risk recommendations to stakeholders, including executive management, with travel ~10%.

Skills

Information security risk management

Third-party risk assessment

Stakeholder management

Security frameworks (ISO 27001, NIST)

Cloud security considerations

Education

Bachelor's degree in Computer Science / IT / Data Science / related field

Tools

CRISC

CISA

CCSK

CCAK

CSX Practitioner

ISO 27001 Lead Auditor

PMP

Job description

Siemens Energy, Inc. is seeking a Cybersecurity Supplier Assessor to protect our cybersecurity posture by evaluating the controls of suppliers and partners.

You will lead risk assessments, translate requirements into practical supplier controls, and support remediation plans within procurement, legal, and security teams. You will apply ISO 27001, NIST, and other frameworks while monitoring regulatory changes and promoting robust supplier risk management across the organization.