Senior GRC & TPRM Security Engineer (Remote)

NationMind LLC; New Jersey; On-site; USD 120,000 - 180,000; Full time

Job summary

NationMind LLC seeks a Security Engineer to support third-party risk management and GRC initiatives in a remote setting. The role requires deep technical security expertise to assess vendor risk, evaluate control effectiveness, and align practices with enterprise policies and cybersecurity best practices.

The ideal candidate will lead end-to-end third-party risk assessments, review security controls, and report on risk metrics to leadership.

Qualifications

• Must have GRC and vendor/third-party risk assessment experience.
• 8-10 years of experience in information security.
• Ability to independently assess vendor risk and align with policies.

Responsibilities

• Lead third-party/vendor risk assessments across tech, SaaS, and hybrid environments.
• Review architectures and security controls for risk and remediation guidance.
• Conduct SOC 2 analysis and report control gaps and impacts.
• Ensure alignment with SOC 2/ISO 27001 and enterprise data standards.
• Use GRC platforms (RSA Archer, Onspring, BitSight, ServiceNow) to manage risk lifecycle.
• Collaborate with Legal, Procurement, IT, Privacy, Audit, and Security Ops.

Skills

GRC

Vendor risk assessment

Third party risk assessment

Cyber Security

Data Security

Job description

NationMind LLC seeks a Security Engineer to support third-party risk management and GRC initiatives in a remote setting. The role requires deep technical security expertise to assess vendor risk, evaluate control effectiveness, and align practices with enterprise policies and cybersecurity best practices.

The ideal candidate will lead end-to-end third-party risk assessments, review security controls, and report on risk metrics to leadership.