Third Party Cyber Risk Lead

You will help run the supplier cybersecurity risk program for a large financial services client. You lead targeted security surveys of suppliers in response to emerging threats, such as AI vulnerability readiness, social engineering at law firms, or post quantum readiness.

What you will do

Partner with threat intelligence to identify which suppliers are affected

Design and send surveys, then follow up on responses

Turn results into updated assessment questions, contract language, and internal security standards

What you bring

6+ years in third party cyber risk or threat intelligence with a supplier focus

Experience designing and running targeted supplier surveys, such as emerging threat or readiness surveys

Ability to work with a threat intelligence team to identify affected suppliers

Experience turning results into updated questionnaires, contract language, and standards

Strong project and follow up discipline

Nice to have

Knowledge of emerging topics such as AI risk, post quantum, and social engineering in the legal sector

Contract or procurement clause experience

Survey tools such as Qualtrics, SurveyMonkey, or OneTrust

Preferred certifications

CTPRP, CISA, or CISSP (any one preferred)