Cyber Risk Assessor

Job Title: Cyber Risk Assessor Location: Remote Duration: 12 Months Contract About the role: Client is hiring for a large financial services client. You will assess the cybersecurity risk of suppliers, both before a contract is signed and on an ongoing basis. We are adding four assessors, which raises team capacity by about 25% and helps reduce the current on site assessment backlog (roughly four months). Speed and immediate productivity matter, so you will be productive quickly. What you will do: Review supplier security controls and evidence Conduct on site and virtual assessments Peer review other assessors' work Validate that suppliers fix the gaps you identify What you bring: 6+ years in third party or vendor cyber risk assessment, covering pre contract due diligence and ongoing monitoring Experience reviewing SOC 2, ISO 27001, and pen test evidence, plus control questionnaires such as SIG and CAIQ Experience performing on site and virtual assessments Peer review and remediation validation experience Working knowledge of NIST and ISO frameworks Nice to have: Bank or regulated industry third party risk experience, including OCC and FFIEC third party guidance OneTrust, ProcessUnity, Archer, Prevalent, Whistic, or ServiceNow IRM Willingness to travel for on site assessments Preferred certifications: CTPRP, CISA, CISSP, CISM, or CRISC (any one preferred)