GRC / TPRM Assessment and Remediation SME
- Risk Management
- ISO 27001
- SOC2
- OneTrust
- Archer
- ServiceNow
- CRISC
- CISA
- CISSP
- Wrike
- Airtable
- Jira
Request ID: 105589-1
Title: GRC / TPRM Assessment and Remediation SME
Locations: Austin, TX/Cupertino, CA
Duration: 6 Months
Pay Range: $50 - $55/Hour on W2/C2C (All inclusive)
Introduction
We are seeking an experienced Third-Party Risk Management (TPRM) Assessment and Remediation Subject Matter Expert to manage the end-to-end lifecycle of supplier/vendor cybersecurity risk assessments and remediation — from inventory governance through assessment coordination, escalation management, and executive reporting — in a fully remote, client-facing environment. This role serves as the process authority for vendor risk assessments, findings management, and cross-functional remediation, requiring precise, proactive communication to maintain trust with high-visibility stakeholders.
Required Skills & Qualifications
- 5 years in cybersecurity, TPRM, GRC operations, or supplier risk coordination.
- Working knowledge of NIST CSF, ISO 27001, SOC 2, SIG/CAIQ.
- Hands-on experience with GRC/TPRM tools (OneTrust, Archer, ServiceNow GRC, SupplierNinja, or similar).
- Proven ownership of high-volume, multi-step communication workflows with strict tracking/documentation.
- Excellent written communication for remote, client-facing engagement.
- Experience operating in distributed/remote teams.
- Prior work experience at client or in client's Industry.
Applicants must be able to work directly for Artech on W2.
Preferred Skills & Qualifications
- Certification: CTPRP, CRISC, CISA, or CISSP.
- Experience with Wrike, AirTable, Jira, or similar tracking tools.
- Prior experience in regulated industries (financial services, healthcare, insurance).
- Track record producing leadership-facing weekly reporting.
Day-to-Day Responsibilities
- Maintain the Supplier Inventory as the single source of truth for assessment status.
- Evaluate suppliers against standard frameworks and validate evidence.
- Own Corrective Action Plans (CAPs) end-to-end, define SLAs, track progress, and drive closure with vendors and business owners.
- Run a structured outreach cadence with DRIs and track response/non-response rates for every outreach cycle.
- Deliver a standing weekly metrics report to leadership.
Company Benefits & Culture
- Competitive salary and benefits package.
- Opportunities for professional development and growth.
- Inclusive and dynamic work environment.
For immediate consideration please click APPLY to begin the screening process with Alex.
GRC / TPRM Assessment and Remediation SME · Artech LLC