Skills & Job Responsibilities: * Risk Assessment and Mitigation: * Conduct comprehensive third-party risk assessments to identify potential cyber threats. * Develop and implement risk mitigation strategies to address identified vulnerabilities. * Monitor third-party compliance with cybersecurity policies and standards. * Policy Development and Implementation: * Establish and enforce policies and procedures for third-party cyber risk management. * Ensure third-party vendors adhere to the organization's cybersecurity requirements. * Vendor Management: * Oversee the evaluation, selection, and monitoring of third-party vendors. * Conduct regular audits and assessments of vendor security practices. * Manage contracts and service level agreements (SLAs) with third-party vendors. * Incident Response and Management: * Develop and maintain an incident response plan specific to third-party breaches. * Coordinate with third parties during cybersecurity incidents to ensure timely resolution. * Conduct post-incident reviews and implement improvements based on lessons learned. * Training and Awareness: * Provide training and awareness programs for internal stakeholders on third-party cyber risks. * Ensure third-party vendors are educated on the organization's cybersecurity expectations. * Reporting and Documentation: * Prepare regular reports on third-party cyber risk management activities for senior leadership. * Maintain accurate and up-to-date documentation of all third-party risk assessments and mitigation efforts. * Collaboration and Stakeholder Management: * Work closely with internal teams such as legal, procurement, and IT security. * Build strong relationships with third-party vendors to ensure effective communication and collaboration. * Regulatory Compliance: * Stay updated on relevant cybersecurity regulations and ensure third-party compliance. * Work with legal and compliance teams to address regulatory requirements related to third-party cyber risk. Experience: * 10+ Years of Relevant Experience: * Significant experience in cybersecurity, risk management, or a related field. * Experience in a senior management role, preferably in third-party risk management. Required Skillsets: * Technical Knowledge: * Strong understanding of cybersecurity principles, frameworks, and standards (e.g., NIST, ISO 27001). * Experience with risk assessment tools and methodologies. * Knowledge of common cyber threats and vulnerabilities. * Analytical Skills: * Ability to analyze complex data and identify trends and patterns. * Strong problem-solving skills to address cyber risk issues. * Communication Skills: * Excellent verbal and written communication skills to convey technical information to non-technical stakeholders. * Ability to prepare clear and concise reports and presentations. * Leadership and Management: * Proven experience in leading and managing a team. * Ability to influence and drive change across the organization and with third-party vendors. * Vendor Management: * Experience in managing vendor relationships and contracts. * Strong negotiation skills to ensure favorable terms and conditions in vendor agreements. * Regulatory Knowledge: * Familiarity with relevant cybersecurity and data protection regulations (e.g., OCC, FRB, GLBA, GDPR, CCPA). * Ability to interpret and apply regulatory requirements to third-party risk management. * Project Management: * Strong project management skills to oversee multiple risk management initiatives. * Ability to prioritize tasks and manage time effectively. * Attention to Detail: * High level of attention to detail to ensure thorough risk assessments and accurate documentation. * Certifications (Preferred): * Certified Information Systems Security Professional (CISSP). * Certified Information Security Manager (CISM). * Certified in Risk and Information Systems Control (CRISC). Beacon Hill is an Equal Opportunity Employer that values the strength diversity brings to the workplace. Individuals with Disabilities and Protected Veterans are encouraged to apply. If you would like to complete our voluntary self-identification form, please click here or copy and paste the following link into an open window in your browser: https://jobs.beaconhillstaffing.com/eeoc/ Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records. Company Profile: Beacon Hill Technologies, a premier National Information Technology Staffing Group, provides world class technology talent across all industries utilizing a complete suite of staffing services. Beacon Hill Technologies' dedicated team of recruiting and staffing experts consistently delivers quality IT professionals to solve our customers' technical and business needs. Beacon Hill Technologies covers a broad spectrum of IT positions, including Project Management and Business Analysis, Programming/Development, Database, Infrastructure, Quality Assurance, Production/Support and ERP roles. Learn more about Beacon Hill Staffing Group and our specialty divisions, Beacon Hill Associates, Beacon Hill Financial, Beacon Hill HR, Beacon Hill Legal, Beacon Hill Life Sciences and Beacon Hill Technologies by visiting www.beaconhillstaffing.com . We look forward to working with you. Beacon Hill. Employing the Future™