Third-Party Risk Security Architect

Texas Children's; Houston (TX); Sur place; USD 120 000 - 150 000; Plein temps

Résumé du poste

Texas Children’s in Houston seeks a Data Security Architect to support the Third-Party Risk Management (TPRM) program. You will assess cybersecurity risks across vendors, cloud-hosted and SaaS solutions, AI, and emerging tech, ensuring alignment with policies, standards, and regulatory requirements.

You will manage the risk assessment lifecycle, review vendor security docs (SOC 2, ISO 27001, HITRUST), and document findings in ServiceNow GRC.

Qualifications

• H.S. Diploma or GED and at least 5 years in information services or related fields, including 3+ years in information security.
• Experience with cybersecurity risk assessments, third-party risk management, or GRC frameworks preferred.

Responsabilités

• Conduct cybersecurity risk assessments and reassessments of third-party vendors, applications, and technology solutions.
• Manage the third-party risk assessment lifecycle, including intake reviews, documentation requests, risk evaluation, reporting, and assessment closure.
• Review and evaluate vendor security documentation, including SOC 2 reports, ISO 27001 certifications, HITRUST assessments, security white papers, and architecture diagrams.
• Evaluate vendor security architecture, data flows, system integrations, and third-party access to identify potential cybersecurity risks.
• Assess security risks associated with cloud-hosted solutions, SaaS applications, artificial intelligence, and emerging technologies.
• Evaluate security controls against Texas Children's information security policies, standards, and applicable regulatory requirements.
• Identify, document, and communicate cybersecurity risks, control deficiencies, and recommended risk mitigation measures.
• Perform risk validation activities, review control attestations, and coordinate with responsible stakeholders to address outstanding security requirements.
• Maintain accurate risk assessment records, findings, control evidence, and supporting documentation within ServiceNow GRC.
• Collaborate with business owners, vendors, project managers, and technical teams to gather security information, clarify requirements, and communicate assessment findings.
• Monitor assessment progress, outstanding documentation, and risk validation activities to support timely completion within established service-level expectations.
• Identify material changes to existing vendor solutions that may require additional risk assessments or reassessments.
• Support security exception management, risk acceptance processes, and documentation of identified control gaps.
• Assist in developing and improving TPRM policies, procedures, assessment methodologies, reporting metrics, and operational processes.
• Support internal and external audit activities by providing third-party risk assessment records and supporting evidence.

Connaissances

Information security

Risk assessments

Vendor risk management

Regulatory compliance

Communication

Documentation

Problem solving

Stakeholder management

Formation

High school diploma or GED

Outils

ServiceNow GRC

Description du poste

Texas Children’s in Houston seeks a Data Security Architect to support the Third-Party Risk Management (TPRM) program. You will assess cybersecurity risks across vendors, cloud-hosted and SaaS solutions, AI, and emerging tech, ensuring alignment with policies, standards, and regulatory requirements.

You will manage the risk assessment lifecycle, review vendor security docs (SOC 2, ISO 27001, HITRUST), and document findings in ServiceNow GRC.