[Hiring] Cyber Security TPRM @SRS Distribution Inc.

Role Description

We are seeking a seasoned IT Security professional to lead and mature our IT and Third-Party Risk Management (TPRM) program within the Governance, Risk & Compliance (GRC) function. This role is critical to ensuring our vendors and IT partners meet our security standards and regulatory requirements. The ideal candidate will bring deep expertise in IT risk, TPRM, a strong understanding of GRC frameworks, and hands-on experience with platforms like AuditBoard/Optro or Archer.

• Lead the end-to-end third-party risk assessment lifecycle, including onboarding, periodic reviews, and offboarding.
• Develop and maintain TPRM policies, procedures, and workflows aligned with regulatory and industry standards (e.g., PCI, NIST, ISO 27001, SOC 2).
• Conduct risk assessments and due diligence for new and existing vendors, identifying control gaps and recommending remediation.
• Collaborate with Procurement, Legal, and Business Units to ensure security requirements are embedded in contracts and vendor selection.
• Monitor and report on third-party risk metrics, trends, and compliance posture to senior leadership.
• Maintain and optimize GRC tools (AuditBoard, Archer) to support risk assessments, documentation, and reporting.
• Support internal and external audits related to third-party risk and overall GRC activities.
• Stay current with emerging threats, regulatory changes, and best practices in third-party risk and cybersecurity governance.

Qualifications

• Minimum 5 years of experience in Third-Party Risk Management within an IT Security or GRC function.
• Strong understanding of risk frameworks and regulatory requirements (e.g., CCPA, HIPAA, PCI-DSS, NIST).
• Hands-on experience with GRC platforms such as AuditBoard and Archer.
• Excellent analytical, communication, and stakeholder management skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Relevant certifications (e.g., CTPRP, CISA, CISSP, CRISC) are a plus.

Requirements

• Must be eighteen years of age or older.
• Must be legally permitted to work in the United States.
• Bachelor’s or equivalent degree in a field of study related to IT.
• 5 years of experience in an IT Cybersecurity capacity.

Benefits

• Competitive weekly/bi-weekly pay.
• Discretionary bonuses.
• 401(k) with company match.
• Employee Stock Purchase Plan.
• Paid time off (vacation, sick, volunteer, holidays, birthday, floating).
• Medical/dental/vision.
• Flexible spending accounts.
• Company-paid life and short-term disability.
• Optional long-term disability and additional life insurance.
• All benefits subject to eligibility.