[Hiring] Cyber Security TPRM @SRS Distribution Inc.

Role Description

We are seeking a seasoned IT Security professional to lead and mature our IT and Third-Party Risk Management (TPRM) program within the Governance, Risk & Compliance (GRC) function. This role is critical to ensuring our vendors and IT partners meet our security standards and regulatory requirements. The ideal candidate will bring deep expertise in IT risk, TPRM, a strong understanding of GRC frameworks, and hands-on experience with platforms like AuditBoard/Optro or Archer.

• Lead the end-to-end third-party risk assessment lifecycle, including onboarding, periodic reviews, and offboarding.
• Develop and maintain TPRM policies, procedures, and workflows aligned with regulatory and industry standards (e.g., PCI, NIST, ISO 27001, SOC 2).
• Conduct risk assessments and due diligence for new and existing vendors, identifying control gaps and recommending remediation.
• Collaborate with Procurement, Legal, and Business Units to ensure security requirements are embedded in contracts and vendor selection.
• Monitor and report on third-party risk metrics, trends, and compliance posture to senior leadership.
• Maintain and optimize GRC tools (AuditBoard, Archer) to support risk assessments, documentation, and reporting.
• Support internal and external audits related to third-party risk and overall GRC activities.
• Stay current with emerging threats, regulatory changes, and best practices in third-party risk and cybersecurity governance.

Qualifications

• Minimum 5 years of experience in Third-Party Risk Management within an IT Security or GRC function.
• Strong understanding of risk frameworks and regulatory requirements (e.g., CCPA, HIPAA, PCI-DSS, NIST).
• Hands-on experience with GRC platforms such as AuditBoard and Archer.
• Excellent analytical, communication, and stakeholder management skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Relevant certifications (e.g., CTPRP, CISA, CISSP, CRISC) are a plus.
• Strong proficiency in tools such as Power BI or Tableau and advanced SQL to design data models and executive dashboards tracking vendor risk posture, SLAs, and compliance metrics.
• Hands-on experience automating TPRM processes and connecting platforms (such as Panorays or Archer) using languages such as Python, Power Automate, and REST APIs to eliminate manual reporting.
• Practical experience leveraging generative AI, LLMs, or OCR tools.

Requirements

• Reports directly to an IT Manager.
• This role will not have direct reports.
• Typically requires overnight travel less than 10% of the time.
• Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.
• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
• Must be eighteen years of age or older.
• Must be legally permitted to work in the United States.
• Bachelor’s or equivalent degree in a field of study related to IT.
• 5 years of experience in an IT Cybersecurity capacity.

Benefits

• Competitive weekly/bi-weekly pay.
• Discretionary bonuses.
• 401(k) with company match.
• Employee Stock Purchase Plan.
• Paid time off (vacation, sick, volunteer, holidays, birthday, floating).
• Medical/dental/vision.
• Flexible spending accounts.
• Company-paid life and short-term disability, plus optional long-term disability, and additional life insurance.
• All benefits subject to eligibility.