Third Party Risk Management​ at Tek Experts

Responsibilities

• Identify, assess, and monitor security risks related to external vendors and third-party service providers.
• Conduct risk impact assessments, contract reviews, and due diligence processes.
• Review and ensure compliance with relevant industry frameworks, including NIST, ISO, and PCI-DSS.
• Collaborate with internal stakeholders to define and enforce third-party risk management policies.
• Perform audits of vendors and recommend remediation actions for identified risks.
• Prepare and communicate clear risk reports and findings to senior leadership.
• Maintain a risk register and ensure timely follow-up on mitigation plans.

Qualifications
Education & Certifications

• 3-year IT-related degree (mandatory).
• CISM, CISSP, and CISA certifications (required).

Experience

• 7 –10 years of experience in Governance, Risk, and Compliance (GRC).
• Proven history of conducting risk impact assessments and managing third-party risk programs.
• Familiarity with industry frameworks such as NIST, ISO, and PCI-DSS.

Core Skills & Competencies

• Strong understanding of vendor risk management and compliance processes.
• Excellent analytical and reporting skills with the ability to present risks to senior stakeholders.
• Knowledge of auditing methodologies and contractual risk clauses.
• Strong communication, negotiation, and stakeholder management skills.
• Ability to work cross-functionally and drive risk mitigation initiatives.