Third-Party Risk Management Specialist

Millennium Management LLC; New York (NY); On-site; USD 175,000 - 250,000; Full time

Job summary

Millennium is a global investment firm seeking a Senior Third-Party Risk Manager to assess and monitor vendor security, data protection, and governance. You will lead risk evaluations, coordinate with procurement, legal, and business teams, and ensure remediation of identified gaps.

You will leverage NIST CSF, SOC 2, ISO 27001, and CIS Controls to shape risk posture, support onboarding, and strengthen program controls across the firm’s global operations.

Qualifications

• Experience conducting vendor or third-party security risk assessments.
• Familiarity with NIST CSF, SOC 2, ISO 27001, CIS Controls, SIG, and CAIQ.
• Ability to analyze penetration-test reports and data-flow diagrams.
• Strong written and verbal communication for risk reporting.

Responsibilities

• Conduct security risk assessments for vendors and subprocessors.
• Prepare risk assessment reports and maintain third-party risk records.
• Communicate findings to technical and business stakeholders clearly.
• Track remediation of security gaps and verify implementation.
• Embed security requirements into vendor contracts and onboarding.
• Monitor vendors for incidents and assess business impact.

Skills

Vendor risk assessments

NIST CSF

SOC 2

ISO 27001

CIS Controls

CAIQ

Risk analysis

Communication

Cross-functional collaboration

Penetration test reviews

Education

Bachelor's degree in Computer Science / Information Security

Tools

TPRM platforms

Automation tools

Job description

Millennium is a global investment firm seeking a Senior Third-Party Risk Manager to assess and monitor vendor security, data protection, and governance. You will lead risk evaluations, coordinate with procurement, legal, and business teams, and ensure remediation of identified gaps.

You will leverage NIST CSF, SOC 2, ISO 27001, and CIS Controls to shape risk posture, support onboarding, and strengthen program controls across the firm’s global operations.