Security Third Party Risk Management Specialist

📋 Description

• Execute vendor security reviews using control docs and audit reports.
• Identify third-party security risks, document findings, and recommend risk options.
• Determine security contract requirements and share with Contracts & Legal.
• Maintain Cloudflare Vendor Master including critical vendors.
• Support incident response by ensuring vendors are not affected by vulnerabilities.
• Lead projects to improve the Vendor Security Review process, workflow, and tooling.

🎯 Requirements

• 5-8 years in Security GRC
• Experience reviewing vendor security documentation including ISO 27001, SOC 2, PCI DSS
• Experience identifying security controls gaps, risk ratings, and mitigating controls
• Familiarity with security contract requirements
• Strong organizational, analytical, and interpersonal skills
• Self-starter with the ability to work independently