Remote Senior TPRM Consultant: Vendor Risk & Compliance

Remote; San Francisco (CA); A distancia; USD 140.000 - 190.000; Jornada completa

Descripción de la vacante

Remote is seeking a Senior Third-Party Risk Management Consultant to assess vendor risks across the lifecycle, from onboarding to offboarding. Fluency in Arabic and English is required, with a remote role spanning multiple teams including procurement, legal, cybersecurity, and compliance.

The position emphasizes strengthening TPRM frameworks, reporting, and risk mitigation strategies. The candidate will evaluate cybersecurity, operational, privacy, and resilience risks, manage risk registers,

Formación

• Experience managing third-party risk across the vendor lifecycle.
• Ability to assess cybersecurity, technology, privacy, and operational risks.
• Familiarity with vendor risk registers, findings, remediation, and risk acceptance.
• Knowledge of cloud services, SaaS, managed services, and fourth-party risk.
• Experience with business continuity and incident notification requirements.
• Ability to align risk programs with regulatory and contractual obligations.

Responsabilidades

• Plan and execute Third-Party Risk Management engagements.
• Perform inherent and residual risk assessments for third parties.
• Conduct due diligence for new and existing engagements to uncover risks.
• Evaluate third-party controls against requirements and standards.
• Review evidence and audit reports to validate control effectiveness.
• Maintain risk registers, remediation plans, and governance docs.
• Monitor critical vendors through ongoing reviews and metrics.
• Prepare management reports and executive dashboards.
• Collaborate with stakeholders to ensure comprehensive evaluations.

Conocimientos

Third-party risk management

Vendor due diligence

Inherent and residual risk assessments

Cybersecurity risk assessment

Regulatory compliance

Business continuity and resilience

Vendor risk registers

Risk-based reviews

Contractual risk understanding

Fourth-party risk

Descripción del empleo

Remote is seeking a Senior Third-Party Risk Management Consultant to assess vendor risks across the lifecycle, from onboarding to offboarding. Fluency in Arabic and English is required, with a remote role spanning multiple teams including procurement, legal, cybersecurity, and compliance.

The position emphasizes strengthening TPRM frameworks, reporting, and risk mitigation strategies. The candidate will evaluate cybersecurity, operational, privacy, and resilience risks, manage risk registers,