Third-Party Cybersecurity & Risk Management | Senior GRC Analyst - Vendor Security Assessment Specialist

Job Title: Senior | Lead - Third-Party Cybersecurity & Risk Management | Senior GRC Analyst – Vendor Security Assessment Specialist

Location: Charlotte, NC / Mt Laurel Township, NJ

Work Arrangement: Hybrid (3 Days Onsite)

Employment Type: Contract

Duration: 6+ Months

Pay Range: $45.80/hr. to $53.54/hr. on W2 | $62.14/hr. to $69.60/hr. on C2C

Domain: Financial Services | Governance, Risk & Compliance (GRC)

Application Deadline: June 22, 2026

SKILLS REQUIRED:

Primary (Must-Have):

• 8 to 10+ years of dedicated, hands-on experience in Cybersecurity Governance, Risk & Compliance (GRC)

• Deep expertise in Third-Party Risk Management (TPRM) and comprehensive vendor security assessments

• Strong working knowledge of industry-standard security frameworks (NIST, ISO 27001, SOC 2)

• Proven capability in defining, validating, and auditing security control requirements for external entities

• Demonstrated leadership in tracking, managing, and driving remediation strategies for identified third-party risks

Secondary (Good to Have):

• Advanced security certifications such as CISA, CRISC, CISM, or CISSP

• Experience developing, implementing, and maturing third-party risk management policies and enterprise standards

• Strong analytical acumen for prioritizing risks alongside cross-functional corporate stakeholders

POSITION OVERVIEW

We are seeking an elite Senior Engineer / Consultant with a decade of expertise to step into a Lead - Third-Party Cybersecurity & Risk Management role. Operating on a hybrid schedule out of our Charlotte, NC or Mt Laurel Township, NJ hubs, the selected specialist will anchor our Governance, Risk & Compliance (GRC) team. This position acts as the primary defense line for evaluating external vulnerabilities, establishing vendor security mandates, and leading hands-on risk mitigation frameworks to secure our digital supply chain ecosystem.

ROLES & RESPONSIBILITIES

• Lead end-to-end, comprehensive cybersecurity assessments and structural audits of critical third-party vendors and external partners

• Evaluate, categorize, and formally document cybersecurity risks associated with third-party digital relationships, aligning findings with internal risk thresholds

• Define, validate, and enforce precise security control requirements for vendors, ensuring compliance with NIST, ISO 27001, and SOC 2 paradigms

• Maintain and scale advanced third-party risk management (TPRM) frameworks, policies, and operational standards across the enterprise

• Track remediation lifecycle workflows for identified third-party risks, collaborating directly with vendor teams and internal business units to ensure prompt mitigation

• Communicate technical risk findings, impact metrics, and remediation paths clearly to both technical engineering divisions and non-technical business leaders

BENEFITS

Medical | Dental | Vision | 401(k)

EEOC Compliance:

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment.

DISCLAIMER

AI Usage Policy: Pacer Group uses AI to assist in screening applications. Final hiring decisions are made by human recruiters based on qualifications and experience.