Third-Party Cyber Risk Specialist

Join Cboe's Global Third-Party Risk Management Team as a Third-Party Risk Management Specialist. In this role, you will execute the risk management program for third-party vendors and service providers, focusing on cyber threats and vulnerabilities. You will conduct comprehensive risk assessments, ensure compliance with security standards, monitor vendor relationships, and address client due diligence inquiries. The ideal candidate will have 3+ years of experience in third-party risk management, vendor management, or a comparable field, and a strong understanding of cybersecurity principles.

USD 76,500 - 108,900

Responsibilities

• Conduct comprehensive risk assessments and due diligence reviews for third-party vendors, ensuring compliance with security standards.
• Manage incoming client requests related to assessments and questionnaires, facilitating communication between various teams to validate responses.
• Continuously monitor third-party vendors' security posture through regular assessments, vulnerability scans, and incident reporting.

Requirements

• Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-function teams
• 3+ years’ experience in third-party risk management, vendor management, security incident response, cyber management or comparable field required

Experience conducting vendor risk assessments

• Bachelor’s Degree or equivalent work experience in a relevant field
• Ability to work independently and manage multiple assignments/projects simultaneously
• Strong understanding of cybersecurity principles, including application security, access control, and incident response. Knowledge of compliance and regulatory frameworks (e.g., NIST, SOC 2, GDPR, ISO 27001)

Preferred

• Experience with third party/vendor risk management platforms is a plus