Third Party Cyber Risk Lead

Key Responsibilities

Collaborate with threat intelligence teams to identify suppliers affected by emerging cybersecurity threats. Design, distribute, and manage targeted supplier security surveys and readiness assessments. Follow up with suppliers to ensure timely and complete survey responses. Analyze supplier responses to identify security gaps, risks, and potential vulnerabilities. Translate survey findings into updated security assessment questionnaires, contract language, and internal security standards. Work with cybersecurity, procurement, legal, and vendor management teams to strengthen supplier security. Track project milestones, supplier responses, and risk remediation activities. Evaluate emerging cybersecurity risks, including AI security, social engineering, and post-quantum cryptography readiness. Required Qualifications 12+ years of experience in third-party cyber risk management, supplier cybersecurity risk, or threat intelligence with a supplier focus. Experience designing and executing targeted supplier security surveys. Ability to work with threat intelligence teams to identify suppliers exposed to emerging threats. Experience translating assessment results into security questionnaires, contractual clauses, and internal standards. Strong project management, communication, and stakeholder coordination skills. Experience supporting large enterprises, preferably in banking, financial services, insurance, or other regulated industries.