Onsite Third-Party Risk Assessor

?? Location: Chicago, IL or Denver, CO (Onsite, Hybrid)
?? Pay Range: $70 - $75/hr (W2)
?? Duration: 12-month contract (Contract-to-Hire)

About the Role:

We are seeking an experienced Onsite Third-Party Risk Assessor to perform comprehensive information security reviews of third-party vendors. The role involves pre-assessment, assessment, and remediation activities, ensuring compliance with industry security standards and internal risk policies. The ideal candidate will have a strong understanding of security frameworks, risk assessment methodologies, and compliance regulations.

Key Responsibilities:

• Conduct third-party risk assessments to evaluate security controls, compliance, and operational risks.
• Partner with enterprise vendor managers and third parties to ensure alignment with security policies.
• Review, analyze, and document security controls across various domains, including DLP, endpoint protection, intrusion prevention, and compliance frameworks.
• Identify security gaps, document findings, and provide recommendations for risk mitigation.
• Collaborate with internal stakeholders to develop and improve risk management strategies.
• Maintain compliance risk findings and report them to senior leadership.
• Travel up to 50% as needed for vendor assessments.

Must-Have Skills:

• 5 to 7 years of experience in information security, risk assessment, and IT compliance.
• Strong knowledge of DLP technologies (Email, Endpoint, Network), Intrusion Prevention Systems (IPS), Endpoint Detection & Response (EDR - CrowdStrike, McAfee), and other cybersecurity tools.
• Ability to assess security frameworks such as NIST, PCI-DSS, ISO 27001, SOX, COBIT, and ITIL.
• Experience with IT general controls (ITGC), compliance reviews, and enterprise risk management.
• Strong analytical and communication skills for working with external vendors and internal teams.

Nice-to-Have Skills:

• Experience in IT auditing, third-party vendor risk assessments, or advisory roles.
• Background in Big 4 consulting (Deloitte, EY, KPMG, PwC) or similar risk advisory services.
• Familiarity with risk management tools and compliance tracking systems.