Third Party Risk Mgmt Consultant II

About the Role

Seeking a Third Party Risk Management Consultant II to support continuous monitoring, risk assessments, and ongoing oversight of critical third-party vendors. The ideal candidate will have experience in vendor risk management, information security, and risk intelligence analysis, with the ability to communicate effectively with executive stakeholders and cross-functional teams. This role focuses on identifying, assessing, and remediating vendor risks utilizing risk intelligence tools and industry-standard control frameworks while ensuring regulatory and organizational compliance.

Key Responsibilities

• Monitor third-party vendor risk using risk intelligence tools such as Supply Wisdom and Black Kite, including daily alert reviews and risk triage.
• Conduct periodic vendor reassessments, trigger-based reviews, due diligence evaluations, and SOC report reviews.
• Evaluate vendor controls across cybersecurity, privacy, business continuity, operational resilience, and compliance domains.
• Analyze risk trends, document findings, and provide recommendations regarding inherent and residual risk ratings.
• Escalate critical and high-risk findings within established SLAs and coordinate remediation efforts with internal stakeholders.
• Maintain accurate records in ProcessUnity and support monthly and quarterly executive reporting.

Required Qualifications

• Bachelor's degree or equivalent experience.
• 3 to 5 years of experience in Information Security, Third-Party Risk Management, Vendor Risk Management, or IT Risk Management.
• Experience conducting vendor risk assessments, reassessments, and control validations.
• Familiarity with NIST, ISO 27001, SOC 2, SIG, and other risk and control frameworks.
• Strong analytical, communication, and stakeholder management skills.
• Ability to manage multiple priorities in a fast-paced environment while maintaining attention to detail.

Preferred Qualifications

• CISSP, CRISC, or CISA certification.
• Experience with ProcessUnity, Supply Wisdom, and Black Kite platforms.
• Proven expertise in continuous monitoring, risk intelligence, investigations, and remediation activities.
• Experience presenting findings and recommendations to executive leadership and cross-functional stakeholders.

Work Environment

• Chicago-based team with preference for local candidates, though remote candidates will be considered.
• Collaborative environment working alongside Information Security, Privacy, Legal, Compliance, and Business Continuity teams.
• Fast-paced risk management setting requiring strong judgment, prioritization, and communication skills.

Benefits

• Medical, Dental, Vision, PTO & 401K