Third Party Risk Management (TPRM) Specialist

• IT Auditing: Expertise in conducting IT internal audits with a focus on third-party risk management.
  
• Risk Reporting: Experience in third-party risk assessment reporting such as SOC1, SOC2, and IT SOX compliance.
  
• Information Security: Strong knowledge of information security and cybersecurity, including control testing, network security, and infrastructure assessments.
  
• Compliance & Standards: In-depth familiarity with CSA STAR, ISO controls, NIST frameworks, PCI DSS, and GDPR requirements.
  
• Cloud & Application Security: Experience in assessing cloud security and application security for third-party vendors.
  
• Certifications: Relevant certifications such as CISA, CISSP, CEH, ISO, PCI DSS, or NIST (at least one required).

Qualifications:

• Minimum 15 years of education.
  
• Minimum 5 years of experience in IT audits, risk management, or cybersecurity.
  
• Proven track record in conducting third-party risk assessments and ensuring compliance.
  
• Excellent problem-solving and analytical skills with the ability to translate complex technical risks into actionable recommendations.
  
• Strong communication skills for presenting findings to stakeholders and clients.

Preferred: