TPRM

• Conduct security assessments of vendors, suppliers, and service providers to evaluate their cybersecurity posture.
• Ensure third-party security controls align with regulatory requirements (e.g., SOC 2, ISO 27001, NIST, GDPR).
• Knowledge of security frameworks such as NIST, ISO 27001, SOC 2, GDPR, and other regulatory requirements.
• Experience with vendor risk assessment tools and cybersecurity risk management methodologies.
• Identify security risks in vendor environments and recommend appropriate remediation measures.
• Assess cybersecurity clauses in vendor contracts, service level agreements (SLAs), and data protection agreements (DPAs).

Primary Skills:

• SOC 2,
• GDPR
• HIPAA