Lead Service Consultant – Supplier Security Due Diligence & Monitoring Service

Accountabilities

• Provide subject matter expertise on information security requirements during supplier contract negotiations and redline reviews.
• Translate supplier security risk assessment results into practical contractual recommendations aligned with enterprise risk standards.
• Review and evaluate supplier-proposed contract language, ensuring compliance with established security policies and governance requirements.
• Apply approved fallback language and guide stakeholders through security-related contract negotiations.
• Document security exceptions, risk acceptance decisions, contractual deviations, and non-standard positions following governance procedures.
• Facilitate escalations and governance reviews for contractual terms that exceed approved risk tolerances.
• Partner closely with cybersecurity, legal, procurement, supplier management, enterprise risk management, and business teams to support informed contracting decisions.
• Serve as a trusted advisor for complex supplier security due diligence engagements and contractual risk discussions.
• Contribute to the development of service documentation, operating procedures, templates, knowledge resources, and training materials.
• Analyze trends, recommend process improvements, and support reporting, quality assurance, and continuous service enhancement initiatives.

Requirements

• Experience in third-party risk management, supplier security assessments, cybersecurity governance, technology risk management, procurement, legal operations, or contract management.
• Strong understanding of information security principles and the ability to translate technical risks into practical contractual and business guidance.
• Proven experience collaborating with cross-functional stakeholders, including legal, procurement, cybersecurity, and enterprise risk management teams.
• Strong analytical, negotiation, communication, and stakeholder management skills.
• Experience supporting governance processes, exception management, policy interpretation, and control assessment activities.
• Able to influence decision-making, build consensus, and navigate complex enterprise environments with multiple stakeholders.
• Strong organizational skills with the ability to manage competing priorities while maintaining accuracy and attention to detail.
• Self-motivated, collaborative, and committed to delivering high-quality, risk-aligned solutions in a remote work environment.

Benefits

• Fully remote position within the United States.
• Competitive annual salary ranging from $90,700 to $153,925, based on experience and qualifications.
• Comprehensive technology package, including laptop, monitors, headset, keyboard, and mouse.
• Monthly internet connectivity reimbursement for eligible remote employees.
• Comprehensive health and wellness benefits.
• Opportunities for professional growth, continuous learning, and career development.
• Collaborative, inclusive, and innovation-driven work environment.
• Meaningful opportunities to contribute to enterprise cybersecurity, supplier governance, and risk management initiatives.