Client & Vendor Risk Manager

We're partnering with a leading international Am Law firm to identify an experienced Information Security Client & Vendor Risk Manager to join their Information Security team.

This individual will own the firm's client and vendor risk management program, serving as the primary point of contact for information security due diligence, client security assessments, and third-party vendor reviews. You'll work cross-functionally with Information Security, Procurement, Legal, and firm leadership to strengthen the firm's security posture while supporting client and regulatory requirements.

Responsibilities:

• Lead the firm's client and vendor security due diligence program
• Conduct enterprise-level vendor risk assessments and review SOC 2, ISO 27001, and other security documentation
• Partner with internal stakeholders on security requirements, contracts, and risk mitigation
• Support client security audits, RFPs, and compliance reviews
• Develop and enhance vendor risk frameworks, workflows, and monitoring processes
• Stay current on cybersecurity regulations and emerging industry risks
• Mentor junior team members and drive continuous process improvements

Qualifications:

• 6+ years of experience in Information Security, Vendor Risk, Cybersecurity Compliance, or Governance, Risk & Compliance (GRC)
• Strong knowledge of SOC 2, ISO 27001, NIST CSF, HIPAA, GLBA, and privacy regulations
• Experience leading enterprise vendor risk assessments and client security reviews
• Excellent communication skills with the ability to present to executive leadership and clients
• Professional certifications such as CISSP, CISM, CISA, CRISC, CTPRA, or ISO 27001 Lead Implementer/Auditor required

Location: Must reside in a commutable distance to Dallas, TX - Remote (occasional travel for business or team meetings)

If you're interested in learning more, feel free to apply or send me a message directly.