Third-Party Cybersecurity & Risk Management | Senior GRC Analyst - Vendor Security Assessment S[...]

Job Title: Senior | Lead - Third-Party Cybersecurity & Risk Management | Senior GRC Analyst – Vendor Security Assessment Specialist Location: Charlotte, NC / Mt Laurel Township, NJ Work Arrangement: Hybrid (3 Days Onsite) Employment Type: Contract Duration: 6+ Months Pay Range: $45.80/hr. to $53.54/hr. on W2 | $62.14/hr. to $69.60/hr. on C2C Domain: Financial Services | Governance, Risk & Compliance (GRC)

SKILLS REQUIRED

Primary (Must-Have) 8 to 10+ years of dedicated, hands‑on experience in Cybersecurity Governance, Risk & Compliance (GRC) Deep expertise in Third‑Party Risk Management (TPRM) and comprehensive vendor security assessments Strong working knowledge of industry‑standard security frameworks (NIST, ISO 27001, SOC 2) Proven capability in defining, validating, and auditing security control requirements for external entities Demonstrated leadership in tracking, managing, and driving remediation strategies for identified third‑party risks Secondary (Good to Have) Advanced security certifications such as CISA, CRISC, CISM, or CISSP Experience developing, implementing, and maturing third‑party risk management policies and enterprise standards Strong analytical acumen for prioritizing risks alongside cross‑functional corporate stakeholders

POSITION OVERVIEW

We are seeking an elite Senior Engineer / Consultant with a decade of expertise to step into a Lead - Third-Party Cybersecurity & Risk Management role. Operating on a hybrid schedule out of our Charlotte, NC or Mt Laurel Township, NJ hubs, the selected specialist will anchor our Governance, Risk & Compliance (GRC) team. This position acts as the primary defense line for evaluating external vulnerabilities, establishing vendor security mandates, and leading hands‑on risk mitigation frameworks to secure our digital supply chain ecosystem.

ROLES & RESPONSIBILITIES

Lead end‑to‑end, comprehensive cybersecurity assessments and structural audits of critical third‑party vendors and external partners Evaluate, categorize, and formally document cybersecurity risks associated with third‑party digital relationships, aligning findings with internal risk thresholds Define, validate, and enforce precise security control requirements for vendors, ensuring compliance with NIST, ISO 27001, and SOC 2 paradigms Maintain and scale advanced third‑party risk management (TPRM) frameworks, policies, and operational standards across the enterprise Track remediation lifecycle workflows for identified third‑party risks, collaborating directly with vendor teams and internal business units to ensure prompt mitigation Communicate technical risk findings, impact metrics, and remediation paths clearly to both technical engineering divisions and non‑technical business leaders

BENEFITS

Medical Dental Vision 401(k) EEOC Compliance: We are an equal opportunity employer, and all qualified applicants will receive consideration for employment. #J-18808-Ljbffr Pacer Group