Vendor Risk Consultant
Skills
CISACyber Risk ManagementCyber Security RiskCybersecurityEthical HackingGSNARisk Assessment
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 5+ years of professional cybersecurity consulting experience
- Outstanding communication skills
- Ability to explain complex cybersecurity concepts to non-technical audiences
- Strong understanding of cybersecurity concepts, technologies, and best practices
- Data analysis skills using Microsoft Excel or similar, and scripting languages like Python
- Ability to manage multiple client accounts and prioritize tasks
- Work independently and collaboratively
- At least one certification such as CEH, GSLC, GCPM, GSTRT, GCCC, GSNA, CISSP, CISM, CISA, or CRISC
- Experience conducting cybersecurity assessments and audits is desired
- Previous experience in vendor risk management is desired
Nice to have
- Experience conducting cybersecurity assessments
- Previous experience in vendor risk management
- Relevant professional certifications like CEH, CISSP, or CISA.
Day to day
- Conduct risk assessments of customers’ vendors to identify potential risks.
- Monitor and report on vendor risk profiles to customers regularly.
- Provide advice and analysis to improve vendor risk management and mitigate findings.