Vendor Security Risk Assessor

Apex Systems; Florida; Sur place; USD 55 000 - 69 000; Temps partiel

Avantages offerts par ce poste

401K with company match

ESPP (employee stock purchase program)

Health, dental, vision insurance

Résumé du poste

Everforth Apex Systems is seeking a Risk Assessor to conduct comprehensive cybersecurity assessments of third‑party vendors in the Florida region. You will manage vendor questionnaires, review security documentation, and provide risk ratings, requirements, and recommendations throughout the vendor lifecycle.

You will partner with business units, procurement, legal, and IT teams to ensure regulatory alignment and effective risk management.

Qualifications

• Bachelor's degree in information security, computer science, business or related field.
• 3–5 years of experience in cybersecurity risk management or third‑party risk assessment.
• CISA and/or CTPRA certifications preferred.
• Solid understanding of NIST, ISO 27001 and SOC 2 frameworks.
• Experience with risk assessment tools and platforms (GRC, BitSight, Dun & Bradstreet, etc.).

Responsabilités

• Conduct comprehensive cybersecurity risk assessments of third‑party vendors throughout the vendor lifecycle.
• Perform vendor security assessments for standard and expedited review processes.
• Analyze vendor security documentation, certifications, and compliance frameworks.
• Provide risk ratings, requirements and recommendations for vendor engagements.
• Manage vendor security questionnaires and documentation review processes.
• Ensure vendor assessments comply with industry standards and regulatory requirements.
• Present risk findings and recommendations to management and steering committees.

Connaissances

Cybersecurity frameworks

Risk assessment

GRC tools

Vendor risk management

Executive reporting

Project management

Communication

Formation

Bachelor's degree in Information Security

Bachelor's degree in Computer Science

Bachelor's degree in Business Administration

Outils

GRC Platforms

BitSight

Dun & Bradstreet

Description du poste

Everforth Apex Systems is seeking a Risk Assessor to conduct comprehensive cybersecurity assessments of third‑party vendors in the Florida region. You will manage vendor questionnaires, review security documentation, and provide risk ratings, requirements, and recommendations throughout the vendor lifecycle.

You will partner with business units, procurement, legal, and IT teams to ensure regulatory alignment and effective risk management.