AVP Cyber Security TPRM

AVP – Cyber Security Third-Party Risk Management (TPRM)

Location: London | Hybrid working

Working pattern: 4 days/week during the contract, moving to 2-3 days/week upon permanent conversion

Contract: Contract to Permanent

Permanent Salary: £85,000 + bonus + benefits

We're looking for an experienced Cyber Security Third-Party Risk Management (TPRM) professional for an exciting AVP-level opportunity with a global investment bank.

This is a great opportunity for someone with a strong background in cyber security risk, vendor assessments and risk governance to take ownership of third-party security risk management within a complex, highly regulated environment.

Key Responsibilities:

• Lead and develop the cyber security Third-Party Risk Management programme
• Oversee security risk assessments for vendors, suppliers and third-party service providers
• Review security documentation, including ISO 27001 certifications, penetration test reports and security questionnaires
• Assess controls against frameworks such as NIST, ISO 27001, CIS and PCI-DSS
• Drive risk remediation, exception management and risk acceptance processes
• Partner with Procurement, Legal, Compliance, Privacy, IT and business stakeholders
• Manage ongoing monitoring of critical and high-risk third parties
• Support audits, strengthen governance frameworks and improve TPRM processes

What I’m Looking For:

• 5+ years’ experience across Cyber Security, Information Security, IT Risk or TPRM
• Strong knowledge of third-party/vendor risk management and security controls
• Experience reviewing technical security evidence and risk assessments
• Familiarity with GRC/TPRM platforms and regulatory requirements
• Excellent stakeholder management and communication skills
• The ability to influence, challenge and drive risk-based decisions