Cybersecurity Lead
Miami, FL · On-site
... vendor risk assessments Serve as a primary security advisor to business leaders, help prioritize security initiatives based on business risk, and support cyber insurance questionnaires Conduct ...
Cybersecurity Lead
Miami, FL · On-site
... vendor risk assessments Serve as a primary security advisor to business leaders, help prioritize security initiatives based on business risk, and support cyber insurance questionnaires Conduct ...
Perform formal assessments of technology risks using common processes within Risk Management ... vendor relationship and services (e.g., purchased software, software as a service, service ...
New
Perform formal assessments of technology risks using common processes within Risk Management ... vendor relationship and services (e.g., purchased software, software as a service, service ...
New
... vendor risk assessments Serve as a primary security advisor to business leaders, help prioritize security initiatives based on business risk, and support cyber insurance questionnaires Conduct ...
... vendor risk assessments Serve as a primary security advisor to business leaders, help prioritize security initiatives based on business risk, and support cyber insurance questionnaires Conduct ...
Perform formal assessments of technology risks using common processes within Risk Management ... vendor relationship and services (e.g., purchased software, software as a service, service ...
New
Perform formal assessments of technology risks using common processes within Risk Management ... vendor relationship and services (e.g., purchased software, software as a service, service ...
New
... vendors, and acquisitions into existing environments. * Prioritize remediation efforts based on ... Contribute to risk assessments, exception reviews, security documentation, and governance ...
... vendors, and acquisitions into existing environments. * Prioritize remediation efforts based on ... Contribute to risk assessments, exception reviews, security documentation, and governance ...
AVP, IT & AI Governance
Coral Gables, FL · On-site
$150K - $187K/yr
Partner with Vendor Risk to assess controls, transparency, validation, and data protections * Ensure AI-specific contractual safeguards Metrics & Reporting * Define KPIs and KRIs for IT and AI ...
AVP, IT & AI Governance
Coral Gables, FL · On-site
$150K - $187K/yr
Partner with Vendor Risk to assess controls, transparency, validation, and data protections * Ensure AI-specific contractual safeguards Metrics & Reporting * Define KPIs and KRIs for IT and AI ...
AVP, IT & AI Governance
$150K - $187K/yr
Partner with Vendor Risk to assess controls, transparency, validation, and data protections * Ensure AIspecific contractual safeguards Metrics & Reporting * Define KPIs and KRIs for IT and AI ...
AVP, IT & AI Governance
$150K - $187K/yr
Partner with Vendor Risk to assess controls, transparency, validation, and data protections * Ensure AIspecific contractual safeguards Metrics & Reporting * Define KPIs and KRIs for IT and AI ...
AVP, IT & AI Governance
$150K - $187K/yr
Partner with Vendor Risk to assess controls, transparency, validation, and data protections * Ensure AIspecific contractual safeguards Metrics & Reporting * Define KPIs and KRIs for IT and AI ...
AVP, IT & AI Governance
$150K - $187K/yr
Partner with Vendor Risk to assess controls, transparency, validation, and data protections * Ensure AIspecific contractual safeguards Metrics & Reporting * Define KPIs and KRIs for IT and AI ...
IT Enterprise Risk Analyst
Tampa, FL · On-site
Medical
Dental
Vision
Life
Retirement
PTO
The IT Risk Analyst helps manage the Firm's GRC and IT risk programs, focusing on information ... assess, data processing terms, and data residency as applicable). * Support periodic vendor ...
IT Enterprise Risk Analyst
Tampa, FL · On-site
Medical
Dental
Vision
Life
Retirement
PTO
The IT Risk Analyst helps manage the Firm's GRC and IT risk programs, focusing on information ... assess, data processing terms, and data residency as applicable). * Support periodic vendor ...
... vendor risk processes. Preferred Skills • Experience testing SIG questionnaires and assessment workflows. • Familiarity with Archer Engage integrations. • Exposure to automation testing tools ...
... vendor risk processes. Preferred Skills • Experience testing SIG questionnaires and assessment workflows. • Familiarity with Archer Engage integrations. • Exposure to automation testing tools ...
Lead the identification, assessment, and quantification of risk across retail, hospitality, mixed ... Vendor & Broker Relations: Maintain strong partnerships with external carriers, brokers, adjusters ...
Quick apply
Lead the identification, assessment, and quantification of risk across retail, hospitality, mixed ... Vendor & Broker Relations: Maintain strong partnerships with external carriers, brokers, adjusters ...
Risk Mitigation and Compliance: Working closely with the Vendor Manager and the Operations Exam & Control Support Manager, you will assess vendor risk across customer acquisition and servicing to ...
Risk Mitigation and Compliance: Working closely with the Vendor Manager and the Operations Exam & Control Support Manager, you will assess vendor risk across customer acquisition and servicing to ...
Skills: Cyber Security - GRC - Vendor Risk Assessment~Cyber Security - IAM Professional Services Experience Required: 6-8, Project Code
Skills: Cyber Security - GRC - Vendor Risk Assessment~Cyber Security - IAM Professional Services Experience Required: 6-8, Project Code
Risk Management • Identify and assess physical security, operational, and fraud-related risks ... vendors, and external partners as appropriate. • Coach and mentor the Security staff. Compliance ...
Risk Management • Identify and assess physical security, operational, and fraud-related risks ... vendors, and external partners as appropriate. • Coach and mentor the Security staff. Compliance ...
The OT Cyber Risk Specialist III is responsible for identifying, assessing, and managing ... assessments for third-party vendors, cloud platforms, and business applications to ensure ...
The OT Cyber Risk Specialist III is responsible for identifying, assessing, and managing ... assessments for third-party vendors, cloud platforms, and business applications to ensure ...
Working with leadership, project teams, internal business partners, external vendors ... Track and assess key risks related to technology adoption, operational change, data use, and ...
Working with leadership, project teams, internal business partners, external vendors ... Track and assess key risks related to technology adoption, operational change, data use, and ...
Risk Analyst
Fort Lauderdale, FL · On-site
Working with leadership, project teams, internal business partners, external vendors ... Track and assess key risks related to technology adoption, operational change, data use, and ...
Risk Analyst
Fort Lauderdale, FL · On-site
Working with leadership, project teams, internal business partners, external vendors ... Track and assess key risks related to technology adoption, operational change, data use, and ...
Director of Strategic Sourcing and Purchasing
Daytona Beach, FL · On-site
Medical
Dental
Vision
Life
Retirement
PTO
Establish and maintain a preferred supplier list and manage vendor onboarding and risk assessments. * Support contract lifecycle management, ensuring legal and regulatory compliance. * Lead and ...
Director of Strategic Sourcing and Purchasing
Daytona Beach, FL · On-site
Medical
Dental
Vision
Life
Retirement
PTO
Establish and maintain a preferred supplier list and manage vendor onboarding and risk assessments. * Support contract lifecycle management, ensuring legal and regulatory compliance. * Lead and ...
Vendor Risk Assessment information
What is a vendor risk assessment?
A Vendor Risk Assessment is a process used by organizations to evaluate and manage the potential risks associated with outsourcing services or products to third-party vendors. The assessment typically examines areas such as data security, regulatory compliance, financial stability, and operational practices of the vendor. Its purpose is to identify potential vulnerabilities or threats that could impact the organization if the vendor fails to meet expectations or is compromised. Regular vendor risk assessments help ensure that third-party relationships do not expose the company to undue risk and that appropriate controls are in place.
What are the key skills and qualifications needed to thrive as a vendor risk assessment professional?
To thrive in Vendor Risk Assessment, you need a solid understanding of risk management principles, third-party due diligence, and regulatory compliance, often supported by a degree in business, IT, or a related field. Familiarity with risk assessment tools, governance frameworks (like ISO 27001), and platforms such as GRC (Governance, Risk, and Compliance) systems is typically required. Strong analytical thinking, attention to detail, and effective communication skills help professionals assess vendor risks and collaborate across departments. These skills are crucial for identifying, mitigating, and communicating risks that could impact an organization’s operations, security, or reputation.
What are some common challenges faced in a vendor risk assessment role, and how can I prepare to address them?
Professionals in Vendor Risk Assessment often encounter challenges such as managing large volumes of vendor data, ensuring compliance with evolving regulations, and effectively communicating risks to both internal stakeholders and vendors. To prepare for these challenges, it's important to develop strong organizational and analytical skills, stay informed about regulatory changes, and build effective communication strategies. Collaborating closely with procurement, legal, and IT teams is also essential for gathering accurate information and implementing risk mitigation measures.
What is the difference between Vendor Risk Assessment vs Vendor Compliance Analyst?
| Aspect | Vendor Risk Assessment | Vendor Compliance Analyst |
|---|---|---|
| Primary Focus | Evaluating risks associated with vendors and third-party providers | Ensuring vendors comply with policies, regulations, and contractual obligations |
| Certifications | Certifications like CISSP, CISA, or vendor risk management courses | Certifications such as CCEP, CISA, or compliance-specific credentials |
| Work Environment | Risk management teams, procurement, cybersecurity departments | Compliance teams, legal, procurement, and audit departments |
| Industry Usage | Common in finance, healthcare, and IT sectors | Prevalent in regulated industries like finance, healthcare, and manufacturing |
Vendor Risk Assessment focuses on identifying and mitigating risks posed by vendors, while Vendor Compliance Analysts ensure vendors adhere to policies and regulations. Both roles are essential for managing third-party relationships but differ in their primary objectives and activities.
What cities in Florida are hiring for Vendor Risk Assessment jobs?
Cities in Florida with the most Vendor Risk Assessment job openings:
Full-time
Re-posted 20 days ago
Job description
Job Summary:
Experienced Cybersecurity Lead to protect our multi-site infrastructure and drive key cybersecurity initiatives. This is a hands-on, hybrid role that balances technical execution with security governance and compliance. Reports directly to the IT Director to ensure our systems remain secure, resilient, and compliant
Key Responsibilities
Monitor and secure network, server, and cloud infrastructure (Microsoft 365, Azure, AWS)
Lead enterprise cybersecurity initiatives, strategy deployment, and security-related projects (e.g., endpoint protection, MFA, vulnerability mitigation, secure configurations)
Lead cybersecurity response, triage, root cause analysis, and post-incident coordination during major incidents
Coordinate third-party penetration testing, vulnerability tracking, and vendor risk assessments
Serve as a primary security advisor to business leaders, help prioritize security initiatives based on business risk, and support cyber insurance questionnaires
Conduct internal audits and implement security controls across cloud and on-prem environments
Maintain and optimize endpoint security tools EDR/MDR
Support phishing detection, remediation, and user awareness initiatives
Maintain, optimize, and enforce Cybersecurity documentation, procedures, and policies
Collaborate with IT Director on future roadmap items, including SIEM implementation and security compliance frameworks
Stay current on emerging threats and recommend proactive measures.
Requirements
Requirements
5+ years of hands-on experience in Cybersecurity roles
Strong knowledge of: Firewalls, VPNs, and Microsoft 365 security controls
Solid experience with Windows Server, Azure, and AWS environments
Proven experience in managing security incidents and implementing technical controls
Solid understanding of access control, encryption, patch management, and system hardening
Familiarity with industry-standard cybersecurity frameworks (e.g., NIST, CIS Controls, ISO 27001) and applicable aviation security guidance (TSA/FAA directives)
Excellent analytical, problem-solving, and decision-making skills
Strong written and verbal communication skills to interact effectively with department leaders
Preferred Qualifications
Certifications such as Security+, MS-500, Cisco Security, CISSP, or similar are a plus
Experience working in multi-site environment
Familiarity with EDR platforms, phishing response, and cloud identity protection
Experienced Cybersecurity Lead to protect our multi-site infrastructure and drive key cybersecurity initiatives. This is a hands-on, hybrid role that balances technical execution with security governance and compliance. Reports directly to the IT Director to ensure our systems remain secure, resilient, and compliant
Key Responsibilities
Monitor and secure network, server, and cloud infrastructure (Microsoft 365, Azure, AWS)
Lead enterprise cybersecurity initiatives, strategy deployment, and security-related projects (e.g., endpoint protection, MFA, vulnerability mitigation, secure configurations)
Lead cybersecurity response, triage, root cause analysis, and post-incident coordination during major incidents
Coordinate third-party penetration testing, vulnerability tracking, and vendor risk assessments
Serve as a primary security advisor to business leaders, help prioritize security initiatives based on business risk, and support cyber insurance questionnaires
Conduct internal audits and implement security controls across cloud and on-prem environments
Maintain and optimize endpoint security tools EDR/MDR
Support phishing detection, remediation, and user awareness initiatives
Maintain, optimize, and enforce Cybersecurity documentation, procedures, and policies
Collaborate with IT Director on future roadmap items, including SIEM implementation and security compliance frameworks
Stay current on emerging threats and recommend proactive measures.
Requirements
Requirements
5+ years of hands-on experience in Cybersecurity roles
Strong knowledge of: Firewalls, VPNs, and Microsoft 365 security controls
Solid experience with Windows Server, Azure, and AWS environments
Proven experience in managing security incidents and implementing technical controls
Solid understanding of access control, encryption, patch management, and system hardening
Familiarity with industry-standard cybersecurity frameworks (e.g., NIST, CIS Controls, ISO 27001) and applicable aviation security guidance (TSA/FAA directives)
Excellent analytical, problem-solving, and decision-making skills
Strong written and verbal communication skills to interact effectively with department leaders
Preferred Qualifications
Certifications such as Security+, MS-500, Cisco Security, CISSP, or similar are a plus
Experience working in multi-site environment
Familiarity with EDR platforms, phishing response, and cloud identity protection