Supplier Cybersecurity Risk Assessment Coordinator/Manager

Role: Supplier Cybersecurity Risk Assessment Coordinator / Manager
Location: Sunnyvale, CA (Onsite)
Duration: 6+ months contract

Job Description:
The Supplier Cybersecurity Risk Assessment Coordinator/Manager is responsible for managing the end-to-end lifecycle of supplier cybersecurity assessments and reassessments. This role ensures accurate supplier inventory management, assessment coordination, stakeholder communication, reporting, and escalation management while supporting third-party risk management and cybersecurity governance objectives.

Key Responsibilities
Supplier Inventory & Data Management

• Maintain and manage supplier inventory records within Governance, Risk, and Compliance (GRC) platforms.
• Identify and categorize suppliers requiring cybersecurity assessments and reassessments.
• Maintain accurate supplier ownership and contact information.
• Ensure data integrity and consistency throughout the assessment lifecycle.

Assessment Coordination & Execution

• Coordinate with security stakeholders and business owners to validate supplier ownership and assessment requirements.
• Initiate and manage cybersecurity assessment workflows.
• Create and track assessment tasks within project management systems.
• Participate in assessment review meetings and provide support on assessment documentation and evidence requirements.
• Monitor assessment coverage and assessment completion status.

Stakeholder Communication & Escalation Management

• Maintain professional communication with internal stakeholders to support assessment progress.
• Track communications, responses, follow-ups, and escalations.
• Escalate unresolved issues and risks to appropriate leadership teams.
• Ensure timely resolution of assessment-related inquiries and dependencies.

Reporting & Metrics

• Prepare and deliver regular operational reports and assessment status updates.
• Track assessment progress, stakeholder engagement, escalation activities, and program coverage metrics.
• Provide insights and recommendations regarding supplier cybersecurity risk posture and assessment performance.

Required Qualifications

• Experience in Cybersecurity, Third-Party Risk Management (TPRM), Governance, Risk & Compliance (GRC), Vendor Risk Management, or related fields.
• Strong written and verbal communication skills.
• Experience managing stakeholder communications and cross-functional coordination.
• Strong organizational and process management skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Proficiency with Microsoft Office Suite, particularly Excel and reporting tools.

Preferred Qualifications

• Experience supporting enterprise supplier risk management programs.
• Experience with GRC and workflow management platforms.
• Familiarity with cybersecurity frameworks such as NIST CSF, ISO 27001, SOC 2, or equivalent standards.
• Experience supporting audits, assessments, compliance reviews, or risk management initiatives.
• Experience preparing leadership-level reports and operational metrics.

Core Competencies

• Third-Party Risk Management
• Cybersecurity Governance
• Stakeholder Relationship Management
• Assessment Coordination
• Process Management
• Risk Analysis
• Escalation Management
• Reporting & Metrics
• Data Quality & Documentation
• Attention to Detail