- Location: Chicago, Illinois
- Type: Contract
- Job #106468
- Job Title: Third Party Risk Management Consultant II (TPRM Continuous Monitoring Analyst)
- Location: Chicago, IL (Remote considered, Chicago preferred)
- Job Type: Full Time, Contract
- Expected Hours per Week: 40
- Schedule: Monday-Friday, 8 hours per day, Remote/Hybrid based on candidate location
- Pay Range: $45 - $55 per hour
Job Description: Seeking a Third Party Risk Management Consultant II to support continuous monitoring, risk assessments, and ongoing oversight of critical third-party vendors. The ideal candidate will have experience in vendor risk management, information security, and risk intelligence analysis, with the ability to communicate effectively with executive stakeholders and cross-functional teams.
This role focuses on identifying, assessing, and remediating vendor risks utilizing risk intelligence tools and industry-standard control frameworks while ensuring regulatory and organizational compliance.
Key Responsibilities - Monitor third-party vendor risk using risk intelligence tools such as Supply Wisdom and Black Kite, including daily alert reviews and risk triage.
- Conduct periodic vendor reassessments, trigger-based reviews, due diligence evaluations, and SOC report reviews.
- Evaluate vendor controls across cybersecurity, privacy, business continuity, operational resilience, and compliance domains.
- Analyze risk trends, document findings, and provide recommendations regarding inherent and residual risk ratings.
- Escalate critical and high-risk findings within established SLAs and coordinate remediation efforts with internal stakeholders.
- Maintain accurate records in ProcessUnity and support monthly and quarterly executive reporting.
Required Qualifications - Bachelor's degree or equivalent experience.
- 3 to 5 years of experience in Information Security, Third-Party Risk Management, Vendor Risk Management, or IT Risk Management.
- Experience conducting vendor risk assessments, reassessments, and control validations.
- Familiarity with NIST, ISO 27001, SOC 2, SIG, and other risk and control frameworks.
- Strong analytical, communication, and stakeholder management skills.
- Ability to manage multiple priorities in a fast-paced environment while maintaining attention to detail.
Preferred Qualifications - CISSP, CRISC, or CISA certification.
- Experience with ProcessUnity, Supply Wisdom, and Black Kite platforms.
- Proven expertise in continuous monitoring, risk intelligence, investigations, and remediation activities.
- Experience presenting findings and recommendations to executive leadership and cross-functional stakeholders.
Why This Role? - Opportunity to play a key role in protecting the organization from evolving third-party risks.
- Work closely with executive leadership and cross-functional risk professionals on high-impact initiatives.
- Potential contract extension based on business needs and performance.
Work Environment - Chicago-based team with preference for local candidates, though remote candidates will be considered.
- Collaborative environment working alongside Information Security, Privacy, Legal, Compliance, and Business Continuity teams.
- Fast-paced risk management setting requiring strong judgment, prioritization, and communication skills.
Benefits: Medical, Dental, Vision, PTO & 401K
#INDOEM #LI-KG1
