Cyber Security TPRM

🔥 6 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 21 days.
• No salary listed.

Apply Now

Check your resume score

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

SRS Distribution Inc.

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2008

📦 Logistics

🏭 Manufacturing

🛒 Retail

Logistics • Manufacturing • Retail

SRS Distribution Inc. is the fastest growing distributor of building products in the United States, specializing in serving professional roofing contractors. With over 430 branches nationwide, SRS offers a wide range of roofing materials and building products from all major manufacturers, and focuses on enhancing customer relationships and business efficiency through innovation. The company is committed to supporting its customers with necessary resources and services to thrive in the roofing industry.

📋 Description

• Lead the end-to-end third-party risk assessment lifecycle, including onboarding, periodic reviews, and offboarding • Develop and maintain TPRM policies, procedures, and workflows aligned with PCI, NIST, ISO 27001, SOC 2, and other standards • Conduct risk assessments and due diligence for new and existing vendors • Identify control gaps and recommend remediation • Collaborate with Procurement, Legal, and Business Units to embed security requirements in contracts and vendor selection • Monitor and report third-party risk metrics, trends, and compliance posture to senior leadership • Maintain and optimize AuditBoard and Archer for risk assessments, documentation, and reporting • Support internal and external audits related to third-party risk and GRC activities • Stay current with emerging threats, regulatory changes, and third-party risk best practices • Report directly to an IT Manager • Travel overnight less than 10% of the time

🎯 Requirements

• Minimum 5 years of experience in Third-Party Risk Management within an IT Security or GRC function • Strong understanding of risk frameworks and regulatory requirements, including CCPA, HIPAA, PCI-DSS, and NIST • Hands-on experience with GRC platforms such as AuditBoard and Archer • Excellent analytical, communication, and stakeholder management skills • Ability to work independently and collaboratively in a fast-paced environment • Strong proficiency in Power BI or Tableau and advanced SQL • Experience designing data models and executive dashboards tracking vendor risk posture, SLAs, and compliance metrics • Hands-on experience automating TPRM processes and connecting platforms such as Panorays or Archer • Experience with Python, Power Automate, and REST APIs • Practical experience leveraging generative AI, LLMs, or OCR tools • Must be eighteen years of age or older • Must be legally permitted to work in the United States • Bachelor's or equivalent degree in a field of study related to IT • 5 years of experience in an IT Cybersecurity capacity

🏖️ Benefits

• Discretionary bonuses • 401(k) with company match • Employee Stock Purchase Plan • Paid time off (vacation, sick, volunteer, holidays, birthday, floating) • Medical, dental, and vision insurance • Flexible spending accounts • Company-paid life insurance • Company-paid short-term disability • Optional long-term disability • Additional life insurance • Competitive weekly/bi-weekly pay

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume