Senior Third-Party Risk Manager (Security & AI)

Millennium; New York (NY); On-site; USD 175,000 - 250,000; Full time

Job summary

Millennium is seeking a seasoned Third-Party Risk Manager in New York to lead security risk assessments for vendors and subprocessors. You will evaluate findings, define compensating controls, and present risk implications to both technical teams and business stakeholders.

You will partner with procurement, legal, and IT to embed security requirements in contracts and onboarding, monitor incidents, and drive governance and automation improvements across the TPRM program.

Qualifications

• Experience conducting vendor or third-party security risk assessments.
• Familiar with NIST CSF, SOC 2, ISO 27001, CIS Controls, SIG, and CAIQ.
• Ability to analyze findings and recommend remediation or risk acceptance.

Responsibilities

• Conduct security risk assessments for vendors and subprocessors.
• Evaluate materiality and business impact of findings and recommend controls.
• Prepare risk reports and maintain third-party risk inventory.
• Communicate findings to technical teams and senior leaders.
• Track remediation and partner with procurement, legal, and IT.

Skills

Vendor risk assessments

NIST CSF

SOC 2

ISO 27001

CIS Controls

CAIQ

Penetration testing reviews

Education

Bachelor’s degree in Computer Science/Engineering/Cybersecurity

Security certifications: CTPRP/CTPRA/CISA/CISSP

Tools

TPRM platforms

GPU inference

Windows

Linux

macOS

Cloud and on-prem infra

Job description

Millennium is seeking a seasoned Third-Party Risk Manager in New York to lead security risk assessments for vendors and subprocessors. You will evaluate findings, define compensating controls, and present risk implications to both technical teams and business stakeholders.

You will partner with procurement, legal, and IT to embed security requirements in contracts and onboarding, monitor incidents, and drive governance and automation improvements across the TPRM program.