[Remote] Third-Party Risk Management (TPRM) Consultant

Note: The job is a remote job and is open to candidates in USA. Prosum is a fast-growing, high-velocity SaaS company seeking a highly motivated and detail-oriented Third-Party Risk Management (TPRM) Consultant for an immediate engagement. In this role, you will be a key contributor to the Governance, Risk, and Compliance (GRC) organization, responsible for executing the end-to-end TPRM process and leveraging AI tools to enhance efficiency in vendor risk assessments.ResponsibilitiesExecute the TPRM Process: Conduct comprehensive, end-to-end risk assessments on third parties. Analyze security controls, SOC 2 Type II reports, ISO certifications, and compliance documentation, gathering necessary details directly from vendorsDrive AI-Powered Efficiency: Leverage Claude and other advanced AI tools to rapidly parse, summarize, and extract key findings from vendor compliance artifacts, significantly reducing time-to-assessment while highlighting material risksIdentify Critical Systems & Assets: Partner with internal technical and business teams to map sensitive data, determine inherent risk, and identify complex processor/ sub-processor relationshipsPrioritize by Risk Appetite: Categorize third parties (tiering) to guide reassessment depth. Evaluate gaps through the lens of our risk appetite, ensuring we secure our supply chain without unnecessarily blocking business velocitySupport Contracting: Partner with our legal and procurement teams to ensure critical security and data protection requirements are accurately captured in vendor contractsMaintain Accurate Records (OneTrust): Document all assessment activities, findings, and mitigation efforts with high data integrity inside our TPRM platform (OneTrust)Provide Operational Support: Guide internal business owners and external third parties smoothly through the TPRM pipeline, answering technical questions and resolving bottlenecksSkills5+ years of direct experience conducting complex, end-to-end third-party risk assessments, preferably in a fast-paced SaaS, tech, or regulated environmentDirect, practical experience leveraging LLMs (Cursor, Claude, Gemini) to optimize workflows, analyze long-form documents, and accelerate evidence collectionDeep understanding of information security/data protection frameworks (SOC 2, ISO 27001, NIST CSF) and global regulations (GDPR, CCPA, and the EU AI Act)Hands-on, intermediate-to-advanced experience with OneTrust, including navigating workflows and managing assessment dataExceptional problem-solving abilities. You don't just check compliance boxes; you look at actual architectural risks and can clearly articulate business impacts to stakeholders at all levelsA proven ability to hit the ground running on day one, take total ownership of your queue, and prioritize effectively in a dynamic, high-velocity environmentRelevant certifications such as CRISC, CISA, CISSP, CISM, or CTPRPFamiliarity with data analysis and visualization tools like Power BI to support data driven risk reportingCompany OverviewProsum is an award-winning Staffing Solutions provider specializing in Contract, Contract-to-Hire, and Permanent placements in the Information Technology industry. It was founded in 1996, and is headquartered in El Segundo, California, USA, with a workforce of 201-500 employees. Its website is http://www.prosum.com.