Third Party Risk Assessor

A leading financial/mortgage organization is seeking an experienced Supplier Risk Management (SRM) Assessor to support enterprise Third-Party Vendor Risk Management (TPRM) initiatives. This role is ideal for professionals with strong risk assessment, IT audit, and SOC report review experience who thrive in a fast-paced, highly regulated environment. Key Responsibilities Conduct end-to-end supplier/vendor risk assessments across technology, privacy, security, resiliency, and operational risk domains. Review and evaluate SOC 1 and SOC 2 Type II reports to validate vendor control environments. Collect, analyze, and assess vendor documentation to identify risks and recommend remediation plans. Partner with vendors and internal stakeholders to drive timely completion of risk assessments. Document findings, communicate risk recommendations, and elevate issues when necessary. Manage multiple vendor assessments while meeting established SLAs and deadlines. Support enterprise third-party risk governance and continuous process improvement initiatives. Required Qualifications 5+ years of experience in Third-Party Vendor Risk Management (TPRM), IT Risk, Risk Assessment, or IT Audit Strong experience reviewing SOC 1 & SOC 2 Type II reports Experience conducting vendor/supplier risk assessments and evaluating control effectiveness Excellent analytical, communication, documentation, and stakeholder management skills Ability to manage multiple priorities in a fast-paced enterprise environment Preferred Qualifications Financial Services or Mortgage industry experience Supply Chain Risk or Compliance background Experience with ProcessUnity Professional certifications such as CISA, CISM, CIA, or CRISC The ideal candidate has: Strong Third-Party Vendor Risk Management experience. Hands-on expertise reviewing SOC 1 & SOC 2 Type II reports. IT Audit or Risk Assessment background. Excellent communication and project management skills. Experience working with enterprise vendors and cross-functional stakeholders. Note: This role does not involve financial statement or vendor financial health reviews. Candidates with only cybersecurity experience and no vendor risk assessment experience are unlikely to be a fit. Pay Range: $45-55 The specific compensation for this position will be determined by a number of factors, including the scope, complexity and location of the role as well as the cost of labor in the market; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits including medical, dental, vision and 401K contributions as well as any other PTO, sick leave, and other benefits mandated by applicably state or localities where you reside or work. #J-18808-Ljbffr PTR Global