Third Party Risk Director

Design and implement a comprehensive third-party cyber risk management program.
Develop and enforce policies and procedures for assessing and managing third-party risks.
Continuously improve the program based on evolving threats and regulatory requirements.
Conduct thorough risk assessments of third-party vendors, including initial due diligence and ongoing monitoring.
Identify potential vulnerabilities and recommend mitigation strategies.
Collaborate with third parties to address and remediate identified risks.
Build and maintain strong relationships with key third-party vendors and partners.
Ensure that third-party contracts include appropriate cybersecurity requirements and standards.
Work with legal and procurement teams to negotiate cybersecurity terms in contracts.
Support the response to cyber incidents involving third-party vendors.
Provide regular updates to senior management on the status of the third-party cyber risk management program.
Prepare and present reports on third-party risk assessments and mitigation efforts.
Communicate effectively with internal teams and third-party vendors regarding cyber risk expectations and requirements.