Third Party Cyber Risk Lead

You will help run the supplier cybersecurity risk program for a large financial services client. You lead targeted security surveys of suppliers in response to emerging threats, such as AI vulnerability readiness, social engineering at law firms, or post quantum readiness.

What you will do

Partner with threat intelligence to identify which suppliers are affected

Design and send surveys, then follow up on responses

Turn results into updated assessment questions, contract language, and internal security standards

What you bring

6+ years in third party cyber risk or threat intelligence with a supplier focus

Experience designing and running targeted supplier surveys, such as emerging threat or readiness surveys

Ability to work with a threat intelligence team to identify affected suppliers

Experience turning results into updated questionnaires, contract language, and standards

Strong project and follow up discipline

Nice to have

Knowledge of emerging topics such as AI risk, post quantum, and social engineering in the legal sector

Contract or procurement clause experience

Survey tools such as Qualtrics, SurveyMonkey, or OneTrust

Preferred certifications

CTPRP, CISA, or CISSP (any one preferred)

Technology and frameworks

Survey tools such as Qualtrics, SurveyMonkey, and OneTrust, plus threat intelligence inputs on emerging supplier risks.

Background we look for

Experience in a large financial services or other regulated enterprise (bank, insurer, card issuer, asset manager) is strongly preferred. Consulting experience from a Big 4 firm or managed security provider is welcome when you were embedded with an enterprise team.