Third Party Cybersecurity GRC Advisor

The Third Party Cybersecurity GRC Advisor evaluates vendor security controls and documentation, including SOC reports and penetration tests, to assess risks from third-party vendors and service providers. The role involves communicating directly with vendors to validate remediation status, supporting internal and external audit activities such as HIPAA and HITRUST, and leading incident investigation and reporting. This position provides subject matter expertise throughout the vendor lifecycle and recommends updates to risk management strategy.