Location: Remote – but requires travel to client site
We are seeking 3 highly motivated and experienced Onsite Third-Party Risk Management (TPRM) Auditors to perform audits on an as needed basis. This is not a full time or consistent 40 hour per week position. Estimated number of audits per year is around 5 to 10, each one lasting 1 to 2 weeks. This is a remote position but travel to 3rd Party vendor sites is required.
In this role, you will be responsible for assessing and mitigating risks associated with our client's third-party vendors and suppliers. You will work closely with various stakeholders across the client organization to ensure compliance with their TPRM program and industry best practices.
Responsibilities:
Conduct comprehensive risk assessment audits of new and existing third-party vendors, including operational, security, and compliance assessments.
Develop and implement risk mitigation strategies for identified risks, including contractual provisions, monitoring activities, and corrective actions.
Review and analyze third-party contracts to ensure alignment with our client’s risk management policies and procedures.
Perform on-site audits and due diligence visits at critical third-party locations.
Maintain and update risk profiles for all third-parties in our vendor management system.
Stay up-to-date on evolving regulations and industry standards related to TPRM.
Collaborate with cross-functional teams such as procurement, legal, and IT to implement and maintain effective TPRM controls.
Prepare reports and presentations summarizing risk assessments and mitigation strategies for management review.
Qualifications:
Bachelor's degree in Accounting, Finance, Risk Management, IT Security or a related field.
Minimum of 10 years of experience in third-party risk management, internal audit, or a related field.
Certified Internal Auditor (CIA), Certified Third Party Risk Professional (CTPRP), Certified Information Systems Auditor (CISA), or equivalent certification preferred.
Strong analytical and problem-solving skills.
Excellent communication and interpersonal skills, with the ability to build relationships with stakeholders across the organization.
Proficient in Microsoft Office Suite and risk management software (e.g., Archer, RSA Archer, OneTrust).
Ability to travel as needed.