Cyber Security TPRM

Job not on LinkedIn

🔥 29 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

SRS Distribution Inc.

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2008

📦 Logistics

🏭 Manufacturing

🛒 Retail

Logistics • Manufacturing • Retail

SRS Distribution Inc. is the fastest growing distributor of building products in the United States, specializing in serving professional roofing contractors. With over 430 branches nationwide, SRS offers a wide range of roofing materials and building products from all major manufacturers, and focuses on enhancing customer relationships and business efficiency through innovation. The company is committed to supporting its customers with necessary resources and services to thrive in the roofing industry.

📋 Description

• Lead the end-to-end third-party risk assessment lifecycle, including onboarding, periodic reviews, and offboarding • Develop and maintain TPRM policies, procedures, and workflows aligned with PCI, NIST, ISO 27001, SOC 2, and other regulatory and industry standards • Conduct risk assessments and due diligence for new and existing vendors • Identify control gaps and recommend remediation • Collaborate with Procurement, Legal, and Business Units to embed security requirements in contracts and vendor selection • Monitor and report third-party risk metrics, trends, and compliance posture to senior leadership • Maintain and optimize AuditBoard and Archer for risk assessments, documentation, and reporting • Support internal and external audits related to third-party risk and GRC activities • Stay current with emerging threats, regulatory changes, and cybersecurity governance best practices • Report directly to an IT Manager • Travel typically requires overnight travel less than 10% of the time

🎯 Requirements

• Minimum 5 years of experience in Third-Party Risk Management within an IT Security or GRC function • Strong understanding of risk frameworks and regulatory requirements, including CCPA, HIPAA, PCI-DSS, and NIST • Hands-on experience with GRC platforms such as AuditBoard and Archer • Excellent analytical, communication, and stakeholder management skills • Ability to work independently and collaboratively in a fast-paced environment • Must be eighteen years of age or older • Must be legally permitted to work in the United States • Bachelor’s or equivalent degree in a field of study related to IT • 5 years of experience in an IT Cybersecurity capacity

🏖️ Benefits

• Competitive weekly/bi-weekly pay • Discretionary bonuses • 401(k) with company match • Employee Stock Purchase Plan • Paid time off (vacation, sick, volunteer, holidays, birthday, floating) • Medical, dental, and vision insurance • Flexible spending accounts • Company-paid life and short-term disability insurance • Optional long-term disability insurance • Additional life insurance

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume