Security Risk Management Consultant

Responsibility: The selected consultants will be responsible for: Conducting Third-Party Risk Management (TPRM) and Vendor Risk Assessments. Performing Vendor Due Diligence reviews and security assessments. Conducting security control reviews and control gap assessments. Assessing technology, cybersecurity, and information security risks associated with third parties. Reviewing cloud security controls and cybersecurity compliance requirements. Supporting outsourcing risk management and governance activities. Preparing risk assessment reports, findings, and remediation recommendations. Engaging stakeholders and presenting assessment outcomes. Supporting compliance with MAS Technology Risk Management expectations and banking regulatory requirements. Key Skills Required Third-Party Risk Management (TPRM) Vendor Risk Management and Due Diligence Security Assessments and Control Gap Assessments Technology Risk, Information Security, or Cybersecurity Cloud Security and Cybersecurity Controls Strong Analytical, Documentation, and Stakeholder Management Skills Familiarity with MAS Technology Risk requirements is preferred