Vendor Management Specialist

Vendor Due Diligence Specialist

The candidate will be responsible for performing comprehensive due diligence on both current and new vendors. This due diligence involves assessing various risks to the firm including: contract risk, information security, financial viability, business continuity, control objectives, and privacy posture. In addition the position is responsible for obtaining vendor deliverables, reviewing information, documenting risk assessments, and following up on remediation items, as well as creating reports. Prior knowledge in any of the following areas is beneficial: disaster recovery planning, SAS 70 reports, security infrastructure, company financial documents and privacy policies.

The ideal candidate will have the ability to manage their deadlines, communicate effectively to all levels of management both internally and externally and have excellent written skills. Knowledge of information security and risk controls is preferred.

Cybersecurity background mandatory

Assessor background mandatory

Financial Services industry mandatory

Assessing risk of 3rd party vendors

NIST experience (if they don't know this they are not a fit)

Know how to read a SOC 2 report

Should be able to tell you 5 things important out of those

ISO certifications are helpful/mandatory

Understand vulnerability scans and pen testing (don't need a SME)