Senior Third-Party Risk Management Consultant
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior consultant assessing and managing third-party vendor risks across cybersecurity, compliance, privacy, and resilience. Strengthening TPRM frameworks, monitoring, remediation, and executive reporting.
Responsibilities:
- Assess and manage risks across the full vendor lifecycle, from onboarding and due diligence through ongoing monitoring and offboarding
- Evaluate third-party cybersecurity, technology, operational, privacy, compliance, and resilience risks
- Track findings and remediation and strengthen TPRM frameworks and reporting
- Support planning and execution of Third-Party Risk Management engagements in alignment with project objectives, methodologies, and delivery timelines
- Conduct inherent and residual risk assessments for third parties, vendors, service providers, partners, and outsourced services
- Perform risk-based due diligence reviews for new and existing third-party engagements
- Evaluate third-party security controls, governance practices, and compliance posture against customer requirements, regulatory obligations, and industry standards
- Review vendor assessment responses, supporting evidence, audit reports, certifications, and independent assurance reports
- Facilitate vendor risk assessments throughout onboarding, periodic reassessments, contract renewals, significant changes, and offboarding
- Identify and assess risks associated with cloud services, managed services, SaaS platforms, telecommunications providers, and strategic technology partners
- Evaluate concentration, dependency, fourth-party, and critical supplier risks
- Collaborate with procurement, legal, cybersecurity, compliance, privacy, and business stakeholders
- Develop and maintain third-party risk registers, assessment records, risk exceptions, remediation plans, and governance documentation
- Track findings, remediation actions, and risk treatment plans
- Facilitate third-party risk acceptance and exception processes
- Perform ongoing monitoring of critical and high-risk vendors
- Assess third-party business continuity, disaster recovery, and operational resilience capabilities
- Review contractual security and risk requirements, including security clauses, SLAs, data protection obligations, audit rights, and incident notification requirements
- Support development and enhancement of TPRM frameworks, methodologies, procedures, standards, and assessment templates
- Analyze vendor risk trends, assessment outcomes, and risk exposures
- Prepare management reports, dashboards, risk metrics, and executive presentations
- Promote awareness and adoption of TPRM requirements
- Ensure alignment with customer policies, regulatory requirements, and industry frameworks related to vendor risk management, cybersecurity, operational resilience, and supply chain security
- Work closely with procurement, legal, cybersecurity, compliance, and business teams to support informed vendor decisions
Requirements:
- 8–10 years of experience
- Fluency in Arabic and English, written and spoken
- Strong experience in third-party risk management (TPRM), including vendor due diligence, inherent and residual risk assessments, and risk-based reviews throughout the vendor lifecycle
- Experience assessing cybersecurity, technology, operational, compliance, privacy, and business continuity risks associated with third parties
- Ability to evaluate vendor security controls using assessment responses, supporting evidence, audit reports, certifications, and independent assurance reports
- Experience managing vendor risk registers, findings, remediation plans, risk acceptance, and exceptions
- Knowledge of risks associated with cloud services, SaaS platforms, managed services, and other technology providers, including concentration and fourth-party risk
- Experience assessing third-party business continuity, disaster recovery, and operational resilience capabilities
- Familiarity with contractual risk requirements, including security clauses, SLAs, data protection obligations, audit rights, and incident notification
- Experience developing or improving TPRM frameworks, procedures, assessment methodologies, and reporting
- Knowledge of applicable NCA controls, privacy requirements, cybersecurity standards, and vendor risk regulations
Benefits:
- 2-year project engagement
- Access to the Global Consulting Bootcamp
- Access to the MC Club
Similar Jobs
Cyber & Risk Management Lead
Cyber and risk management lead supporting SkyePoint Decisions’ federal IT and cybersecurity clients. Managing enterprise risk assessments, registers, mitigation, compliance, and executive reporting.
Senior Consultant, Insurance
Senior Consultant Insurance berät Versicherungsunternehmen zu Digitalisierung, Prozessoptimierung und strategischer Transformation. Eigenständige Leitung von Kundenprojekten und Entwicklung innovativer Beratungslösungen.
Insurance Officer
Insurance Officer selling crop, livestock, and supplemental insurance products. Building producer relationships and servicing complex agricultural insurance portfolios across North Dakota.
Risk Lead, IT Risk Management
Cisco Risk Lead building AI-enabled IT risk intelligence, assurance, and closed-loop remediation. Guiding resilience, controls, and AI safeguards across Cisco’s technology organization.
Crop Insurance Agent
Crop Insurance Agent selling agricultural insurance in Illinois for Trucordia, a nationwide insurance brokerage. Managing sales goals, tools, and client books of business remotely.
Crop Insurance Agent
Crop Insurance Agent selling crop insurance and meeting sales goals for Trucordia, a nationwide insurance brokerage. Growing and servicing agricultural client accounts across Ohio.
Crop Insurance Agent
Crop Insurance Agent selling agricultural insurance and meeting sales goals for Trucordia, a growing nationwide insurance brokerage. Building and servicing a Montana book of business remotely.
Crop Insurance Agent
Crop Insurance Agent selling agricultural insurance and meeting annual sales goals for Trucordia. Growing and servicing a book of business across Wisconsin.
Insurance Sales Advisor – Commercial Lines
Commercial insurance sales advisor growing Trucordia’s brokerage revenue through prospecting, presentations, and Salesforce pipeline management. Managing renewals and client accounts to support long-term retention.
Crop Insurance Agent
Crop Insurance Agent growing and servicing farm insurance accounts at Trucordia. Meeting sales goals and maintaining a strategic book of business remotely in Iowa.
Crop Insurance Agent
Crop Insurance Agent selling agricultural insurance and meeting annual sales goals. Growing and servicing Trucordia’s crop insurance book of business.
Insurance Agent, Sales/Service
Insurance agent supporting Jerry.ai’s AI-powered car and home ownership platform. Handling customer calls, matching policies, processing service requests, and improving the product.
Licensed Insurance Sales Agent
Insurance Sales Agent guiding Jerry.ai customers through tailored auto, home, motorcycle, and specialty insurance coverage. Handling inbound calls and binding policies across 55+ carrier partners.
Licensed Health Insurance Agent
Licensed Health Insurance Agent selling Medicare Advantage, Supplement, and Part D plans remotely. Building a member book of business with nationwide carrier access.
Senior Director, Risk Management
Senior Director leading claims, clinical risk, insurance, and AI strategy for Curana Health’s value-based senior healthcare organization. Supporting risk financing and measurable reductions in total cost of risk.
Property & Casualty Licensed Insurance Representative – Non-Sales
Licensed insurance representative handling non-sales customer inquiries for TP, a global digital business services provider. Resolving customer issues and supporting contract and healthcare-related questions remotely.
Enterprise Insurance Systems Manager
Enterprise Insurance Systems Manager owning insurance SaaS systems, roadmaps, vendors, and compliance. Leading administrators to improve adoption, cycle time, data quality, and customer experience at Veracity.
Life Insurance Sales
Remote life insurance representative serving families through warm leads and coverage applications. Commission-based role with mentorship, flexible scheduling, and leadership growth opportunities.
Life Insurance Sales
Remote life insurance sales representative helping U.S. families review coverage and apply for protection. Serving warm inbound leads in a commission-based role with mentorship and leadership support.
Life Insurance Sales Agent
Remote life insurance sales representative helping U.S. families secure coverage through warm inbound leads. Supporting applications through underwriting in a commission-based role.