Senior Third-Party Risk & Compliance Lead

Firstminute Capital; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Mistral seeks a Senior Third-Party Risk Specialist to oversee vendor risk, due diligence, and regulatory compliance across GDPR, NIS2, and DORA. You will partner with Legal, Procurement, Security, and Operations to embed risk discipline into sourcing and contracting.

In this role, you will architect risk program, conduct assessments and audits, manage incidents, and drive awareness and training across teams to maintain robust documentation and regulatory alignment.

Qualifications

• 7+ years in third-party risk management or cybersecurity compliance.
• Experience with ISO 27001, SOC 2, NIST SP 800-53, or GDPR.
• Proven ability to coordinate across legal, security, and procurement teams.

Responsibilities

• Develop and manage the third-party risk management program.
• Conduct third-party assessments and audits.
• Collaborate with internal teams to integrate risk requirements.
• Manage incidents and non-compliance.
• Raise awareness and train stakeholders.
• Maintain robust documentation.
• Monitor regulatory evolution and adjust framework.
• Optimize tools and processes.
• Align with resilience strategy.
• Contract redlining and negotiation.

Skills

Third-party risk management

Cybersecurity compliance

Information security governance

Risk assessment

Contract negotiation

Documentation

Stakeholder coordination

Tools

EBIOS RM

Job description

Mistral seeks a Senior Third-Party Risk Specialist to oversee vendor risk, due diligence, and regulatory compliance across GDPR, NIS2, and DORA. You will partner with Legal, Procurement, Security, and Operations to embed risk discipline into sourcing and contracting.

In this role, you will architect risk program, conduct assessments and audits, manage incidents, and drive awareness and training across teams to maintain robust documentation and regulatory alignment.