Risk Management Consultant (Contract to Hire: NY or Charlotte)

Responsibilities

• Advises leadership on enterprise risk posture, tradeoffs, and risk acceptance, with clear recommendations.
• Identifies systemic and emerging risks and influences prioritization and investment decisions.
• Led risk assessments and gap assessments across business processes and technologies, from initiation through treatment planning.
• Owes escalation of material risks, with recommendations for treatment or acceptance.
• Maintains the enterprise risk register, keeping risks and response plans current.
• Tracks remediation and follows up to closure and SLA adherence.
• Integrates risk data into recurring reporting and metrics for leadership and risk-focused governance forums.
• Supports and helps drive the third-party risk management program, contributing to vendor risk assessments across onboarding, reassessment, and renewal.
• Advise business owners and procurement on third-party risk decisions, and supports escalation and remediation tracking for vendor risks.
• Contributes to process improvements and program maturity.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, or a related discipline.
• Equivalent experience may be considered in lieu of formal education.
• 7+ years in risk management, including risk leadership or advisory experience.
• Advanced understanding of enterprise risk management, with experience advising leadership on risk posture, tradeoffs, and acceptance.
• Demonstrated experience with third-party/vendor risk assessments across the vendor lifecycle, and the ability to support and help drive a TPRM program.
• Strong executive communication skills, including clear risk documentation and reporting to leadership and governance forums.
• Working knowledge of security and risk frameworks such as NIST CSF, NIST 800-53, PCI-DSS, HIPAA, or SOC 2, applied to enterprise and third-party risk.
• Familiarity with GRC and vendor risk platforms such as TruOps, Prevalent, OneTrust, ProcessUnity, or ServiceNow.
• Strong stakeholder management, with the ability to influence risk decisions without centralized authority.
• Identifies opportunities to improve risk management scalability through analytics, automation, and AI.

Pay

The salary range for this position is $85 per hour.