Lead Third-Party Risk Manager – AI Security

Millennium Management LLC; New York (NY); On-site; USD 175,000 - 250,000; Full time

Benefits offered by this job

Discretionary bonus

Comprehensive benefits

Job summary

Millennium is seeking a senior vendor risk professional in New York to lead third-party risk assessments, citing NIST CSF, SOC 2, and ISO 27001 standards. The role requires collaboration with procurement, legal, and business units to embed security requirements in contracts.

The position offers a base salary with discretionary bonus and comprehensive benefits, reflecting a strong focus on governance of AI models, on-prem and cloud environments, and data protection across a dynamic trading

Qualifications

• Experience conducting vendor risk assessments using established frameworks.
• Familiarity with NIST CSF, SOC 2, ISO 27001, CIS Controls, SIG, and CAIQ.
• Ability to translate risk findings into clear business implications for stakeholders.
• Bachelor's degree or higher in CS/Engineering/Cybersecurity or related field.

Responsibilities

• Conduct security risk assessments for prospective and existing vendors and subprocessors.
• Prepare risk assessment reports and maintain third-party risk inventory.
• Communicate findings and remediation requirements to technical teams and senior leaders.
• Monitor vendor security incidents and oversee remediation actions.

Skills

Vendor risk assessment

NIST CSF

SOC 2 / ISO 27001

Penetration test review

Communication skills

Project management

Education

Bachelor's degree or higher in CS/Engineering/Cybersecurity or related field

Tools

TPRM platforms

AI governance tools

Windows/Linux/macOS

Job description

Millennium is seeking a senior vendor risk professional in New York to lead third-party risk assessments, citing NIST CSF, SOC 2, and ISO 27001 standards. The role requires collaboration with procurement, legal, and business units to embed security requirements in contracts.

The position offers a base salary with discretionary bonus and comprehensive benefits, reflecting a strong focus on governance of AI models, on-prem and cloud environments, and data protection across a dynamic trading