Security Specialist

Creative information Technology

. Perform an annual third-party risk assessment (TPA) of a technical implementation vendor .

Posted 11/11/2026contractRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting third-party risk assessments, evaluating vendor evidence, and delivering comprehensive risk assessment reports. Proficient in applying NIST standards and federal/state regulations to ensure robust IT security practices.

Highest-signal resume keywords

NIST SP 800-53Risk Assessment Report (RAR)Vendor InterviewsCISSPIT Security Regulations

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network SecurityIdentity And Access ManagementCryptographyRisk RegistrySystem And Data InventoryRisk AssessmentNIST Cybersecurity FrameworkHITRUST Risk AssessmentsRisk Assessment Status SummarizationTechnical Implementation Vendor Assessment

Soft Skills

Feedback ProvisionPrioritizationCommunication With Leadership

Certifications & Qualifications

CISSPCISM

Industry Keywords

Third-Party Risk AssessmentIT Security IndustryFederal RegulationsState RegulationsNIST SP 800-30NIST SP 800-37

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Perform an annual third-party risk assessment (TPA) of a technical implementation vendor
Work with a lead analyst to perform the assessment
Own delivery of the System and Data Inventory
Own delivery of a Risk Registry
Own delivery of the Risk Assessment Report (RAR)
Evaluate vendor evidence and provide feedback
Prioritize and summarize risk assessment status for project managers and executive leadership

Requirements

What you’ll need

5 years of thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography
3 years of working knowledge of the IT security industry and federal/state regulations
Deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37
3 years of strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors
3 years of ability to prioritize and summarize risk assessment status to project managers and executive leadership
Bachelor's degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR Associate degree in Computer Science or a related IT field and three years of progressive experience; OR an equivalent combination of education and experience
Professional certifications such as CISSP or CISM
Experience performing NIST 800-53 based risk assessments
Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework
Preferred: Experience completing HITRUST risk assessments

Benefits

Comp & perks

Remote work schedule