Senior Third-Party Risk & Resilience Consultant

MENA Consultant; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

MENA Consultant is seeking a Senior Third-Party Risk Management Consultant to assess and manage vendor risks across the full lifecycle, from onboarding to offboarding. You will review cybersecurity, privacy, and continuity risks and coordinate with procurement, legal, and cybersecurity teams to support informed decisions.

Responsibilities include conducting risk assessments, evaluating controls, and maintaining risk registers with remediation plans.

Qualifications

• Strong experience in third-party risk management (TPRM).
• Experience assessing cybersecurity, technology, operational, compliance, privacy, and business continuity risks.
• Ability to evaluate vendor security controls using responses, evidence, audits, and certifications.
• Experience managing vendor risk registers, findings, remediation plans, risk acceptance, and exceptions.
• Knowledge of risks with cloud services, SaaS, managed services, and fourth-party risk.
• Experience assessing third-party business continuity and disaster recovery capabilities.
• Familiarity with contractual risk requirements including security clauses, SLAs, data protection, audit rights, incident notification.
• Experience developing or improving TPRM frameworks, procedures, assessment methodologies, and reporting.
• Knowledge of applicable NCA controls, privacy requirements, cybersecurity standards, and vendor risk regulations.

Responsibilities

• Plan and execute Third-Party Risk Management engagements in line with project objectives and timelines.
• Perform inherent and residual risk assessments for third parties and outsourced services across business and tech landscapes.
• Conduct risk-based due diligence reviews for new and existing engagements to identify cybersecurity, privacy, and operational risks.
• Evaluate third-party security controls and governance against requirements and standards.
• Review assessment responses, evidence, audits, and certifications to validate control effectiveness.
• Track findings, remediation actions, and risk treatment plans to ensure timely closure.
• Facilitate risk acceptance and exception processes with stakeholders and approval workflows.
• Monitor critical/high-risk vendors through periodic reviews and security alerts.
• Develop and maintain TPRM frameworks, templates, and governance documentation.
• Provide management reports and executive dashboards on vendor risk posture and remediation progress.

Skills

TPRM

Vendor due diligence

Risk-based reviews

Regulatory compliance

Contractual risk requirements

Operational resilience

NCA controls

Job description

MENA Consultant is seeking a Senior Third-Party Risk Management Consultant to assess and manage vendor risks across the full lifecycle, from onboarding to offboarding. You will review cybersecurity, privacy, and continuity risks and coordinate with procurement, legal, and cybersecurity teams to support informed decisions.

Responsibilities include conducting risk assessments, evaluating controls, and maintaining risk registers with remediation plans.