Jobs → Customer Support → GRC TPRM Assessment & Remediation SME

About the Role We are looking for an experienced GRC / Third-Party Risk Management (TPRM) Subject Matter Expert (SME) for a client-facing opportunity. Key Responsibilities • Maintain supplier inventories, assessment status, risk tiers, and DRI ownership in GRC platforms • Coordinate and execute vendor risk assessments; review security evidence, audit reports, certifications, and penetration test results against industry frameworks • Own Corrective Action Plans (CAPs), track remediation SLAs, and drive closure with vendors and internal business owners • Coordinate remediation with Legal, Procurement, and InfoSec teams, including compensating controls • Manage structured stakeholder outreach, follow-ups, management escalations, and high-risk finding resolution • Deliver weekly leadership reports covering assessment progress, response rates, escalations, and remediation status Requirements • 8–10 Years of experience in GRC / Third-Party Risk Management • Strong experience managing vendor/supplier cybersecurity risk assessments, remediation, and stakeholder communications in a client-facing environment • 5+ years in Cybersecurity, TPRM, GRC Operations, or Supplier Risk Coordination • Strong working knowledge of NIST CSF, ISO 27001, SOC 2, SIG, and CAIQ • Hands-on experience with GRC/TPRM tools such as OneTrust, Archer, ServiceNow GRC, SupplierNinja, or similar • Proven ownership of high-volume assessment workflows, follow-ups, escalations, and documentation • Excellent written communication and stakeholder management skills • Experience working with distributed / remote teams Nice to Have • Certifications: CTPRP, CRISC, CISA, or CISSP • Tracking tools: Wrike, AirTable, Jira, or similar • Regulated industry experience – Financial Services, Healthcare, or Insurance • Experience preparing leadership-level weekly metrics and reports