Third Party Cyber Risk Assessor
General title: Third Party Cyber Risk Assessor Location: Remote Duration: 06 Months Contract About the role You will assess the cybersecurity risk of suppliers, both before a contract is signed and on an ongoing basis. We are adding four assessors, which raises team capacity by about 25% and helps reduce the current on site assessment backlog (roughly four months). Speed and immediate productivity matter, so you will be productive quickly. What you will do Review supplier security controls and evidence Conduct on site and virtual assessments Peer review other assessors' work Validate that suppliers fix the gaps you identify What you bring 6+ years in third party or vendor cyber risk assessment, covering pre contract due diligence and ongoing monitoring Experience reviewing SOC 2, ISO 27001, and pen test evidence, plus control questionnaires such as SIG and CAIQ Experience performing on site and virtual assessments Peer review and remediation validation experience Working knowledge of NIST and ISO frameworks