Cyber Security TPRM

SRS Distribution Inc. is seeking an IT security professional to lead and mature its IT and Third-Party Risk Management program within Governance, Risk & Compliance. The role manages vendor risk assessments, develops TPRM policies and workflows, maintains GRC tools, and reports on third-party risk and compliance.

Responsibilities:

• Lead the end-to-end third-party risk assessment lifecycle, including onboarding, periodic reviews, and offboarding
• Develop and maintain TPRM policies, procedures, and workflows aligned with regulatory and industry standards (e.g., PCI, NIST, ISO 27001, SOC 2)
• Conduct risk assessments and due diligence for new and existing vendors, identifying control gaps and recommending remediation
• Collaborate with Procurement, Legal, and Business Units to ensure security requirements are embedded in contracts and vendor selection
• Monitor and report on third-party risk metrics, trends, and compliance posture to senior leadership
• Maintain and optimize GRC tools (AuditBoard, Archer) to support risk assessments, documentation, and reporting
• Support internal and external audits related to third-party risk and overall GRC activities
• Stay current with emerging threats, regulatory changes, and best practices in third-party risk and cybersecurity governance

Requirements:

• Minimum 5 years of experience in Third-Party Risk Management within an IT Security or GRC function
• Strong understanding of risk frameworks and regulatory requirements (e.g., CCPA, HIPAA, PCI-DSS, NIST)
• Hands-on experience with GRC platforms such as AuditBoard and Archer
• Excellent analytical, communication, and stakeholder management skills
• Ability to work independently and collaboratively in a fast-paced environment
• Strong proficiency in tools such as  Power BI or Tableau and advanced SQL to design data models and executive dashboards tracking vendor risk posture, SLAs, and compliance metrics
• Hands-on experience automating TPRM processes and connecting platforms (such as Panorays or Archer) using languages such as Python, Power Automate, and REST APIs to eliminate manual reporting
• Practical experience leveraging generative AI, LLMs, or OCR tools
• Must be legally permitted to work in the United States
• Bachelor's or equivalent degree in a field of study related to IT
• 5 years of experience in an IT Cybersecurity capacity
• Relevant certifications (e.g., CTPRP, CISA, CISSP, CRISC) are a plus