Remote Technical Risk & Vendor Risk Leader

KellyMitchell Group; Renton (WA); Remote; USD 52,000 - 76,000; Full time

Benefits offered by this job

Medical, Dental & Vision

ESOP

401K

Job summary

KellyMitchell Group is seeking an experienced Third-Party/Technical Risk Management professional for a contract role (approx. 1 year). You will own the TPRM program end-to-end, including risk register maintenance, vendor intake, and risk scoring, plus quantitative assessments using FAIR.

The role is fully remote in the US, with responsibilities spanning risk identification, analysis, remediation tracking, and leadership reporting. Strong communication and independent work style are essential.

Qualifications

• 5+ years hands-on third-party/vendor risk assessments.
• 3+ years in technical or quantitative risk management.
• Experience with vendor intake, inherent-risk tiering, security questionnaires, documentation review and risk scoring.
• Experience applying FAIR or similar risk quantification methodologies.
• Experience owning and maintaining a risk register or risk management program.
• Strong technical fluency across infrastructure, applications and security documentation.
• Knowledge of SOC 2, ISO 27001 and NIST CSF.

Responsibilities

• Own and operate the Technical Risk Management program end-to-end, including risk register maintenance and risk closure.
• Manage the Third-Party Risk Management lifecycle for vendors, including intake, tiering, evidence review and risk scoring.
• Apply structured risk quantification methods (e.g., FAIR) to assess risks in financial terms.
• Perform technical risk analysis across infrastructure, applications, and vendor architecture.
• Translate technical findings into clear business-relevant risk statements for stakeholders.
• Collaborate with security engineering and GRC to evaluate diagrams, scans and configurations.
• Track findings and remediation through closure and raise stalled items as needed.
• Monitor vendors for changes in risk posture and subprocess changes.
• Prepare and present risk and TPRM reporting for leadership.

Skills

Vendor risk

Quantitative risk

Security questionnaires

FAIR

Risk register

Security frameworks

Technical fluency

Documentation review

Stakeholder communication

Tools

OneTrust

Vanta

Archer

ServiceNow GRC

Job description

KellyMitchell Group is seeking an experienced Third-Party/Technical Risk Management professional for a contract role (approx. 1 year). You will own the TPRM program end-to-end, including risk register maintenance, vendor intake, and risk scoring, plus quantitative assessments using FAIR.

The role is fully remote in the US, with responsibilities spanning risk identification, analysis, remediation tracking, and leadership reporting. Strong communication and independent work style are essential.