Cybersecurity and Third-Party Risk Manager

About the role

Lord Abbett is an independent firm founded in 1929, known for its leadership, influence, and innovation in the asset management industry. The firm values intellectual curiosity, teamwork, and collaboration across the organization.

Responsibilities

• Support the execution of the TPRM lifecycle to ensure vendor risk is managed consistently across security, operational resilience, financial, and compliance dimensions.
• Perform vendor risk assessments across information security, operational resilience, financial, compliance, and third-party dependencies; document and risk-rate findings.
• Maintain vendor inventory and workflows within the TPRM/GRC platform; monitor changes in vendor risk posture.
• Manage vendor issues, including remediation tracking and incident escalation coordination.
• Develop reporting and dashboards to communicate vendor risk exposure, trends, and remediation status.
• Partner with Legal and business teams to align TPRM outcomes with contracting, SLAs, and governance; support training and accountability.
• Provide independent oversight of the information security program, including policies, standards, and control ownership.
• Review and challenge the information security strategy for alignment with risk appetite, regulatory requirements, and emerging threats.
• Support program maturity and consistent control application; contribute to CISO and committee reporting.
• Review cybersecurity incidents, including root cause, remediation, and improvement actions.
• Support incident response planning and exercises.
• Translate technical findings into clear risk insights for technical and non-technical stakeholders.
• Assess control design and effectiveness across infrastructure, applications, cloud, and identity/access management; validate remediation.
• Conduct control testing and independent assurance activities.
• Collaborate across Technology, Legal, Compliance, and business teams to embed security practices.

Requirements

• Bachelor’s degree in information security, Computer Science, Risk Management, or related field preferred.
• 5+ years of experience in cybersecurity, technology risk, or risk assurance; financial services experience preferred.
• Hands-on experience in TPRM, including vendor lifecycle management.
• Experience assessing controls, supporting incident reviews, and providing risk oversight.
• Familiarity with frameworks such as NIST, ISO 27001, and SOC 2.
• Knowledge of vulnerability management, incident response, IAM, cloud security, and security monitoring tools.
• Experience with TPRM/GRC platforms preferred.
• Relevant certifications (e.g., CISSP, CISA, GIAC, Security+, CRVPM) are a plus.
• Strong analytical, communication, and stakeholder management skills.
• Ability to operate independently, manage priorities, and work across teams.

Qualifications

• Passion for working for a trusted leader in the asset management industry.
• A desire to expand knowledge and deliver a client experience that exceeds expectations.

Skills

• Strong critical thinking, writing, presenting, and stakeholder management skills.
• Curiosity to learn about all portions of the business and high responsiveness to internal and external events.

Benefits

• Annual base salary for this role is $95,000 - $110,000.
• Discretionary Bonus: Role may be eligible to receive an annual discretionary bonus.
• Competitive total rewards package including retirement plans, health and well-being plans.