Vendor Management

Vendor Management Cybersecurity Jobs

2 jobs found

1mo ago

Manager -Cybersecurity Third Party Risk

Sentara Hospitals Norfolk, VA

Norfolk, VA

1mo ago Closed

$117k - $217k/yr Full time Manager Information Security InfoSec

This position is no longer accepting applications (closed Jul 23, 2026).

Job Description

Benefits and culture

Sentara Hospitals offers a comprehensive benefits package and a collaborative, mission‑driven culture in Norfolk, Virginia. This onsite leadership role comes with a salary range of USD 116,729 – 216,777 per year. You will have access to medical, dental, and vision coverage, generous paid time off and sick leave, paid parental and family caregiver leave, emergency backup care, and disability and life insurance. The organization provides a 401(k) or 403(b) with employer matching, tuition assistance up to $5,250 annually plus discounted education through Guild Education, student debt repayment of up to $10,000, reimbursement for certifications, and free access to professional development resources. Additional benefits include pet insurance, a legal resources plan, and the potential for an annual discretionary bonus based on system performance and eligibility. This is an opportunity to contribute to a regulated healthcare environment that prioritizes risk management, privacy, and security.

Responsibilities

Present third‑party risk management topics to leadership across all levels of the organization.
Conduct thorough risk assessments of vendor relationships aligned with risk priorities.
Lead a team of assessors in vendor evaluations and contract security negotiations.
Analyze and rank risks by their potential impact on operations, data, and reputation.
Develop and streamline the third‑party risk management processes and workflows.
Identify and evaluate vulnerabilities within vendor systems, networks, and applications.
Work with IT, security, and compliance teams to design and implement risk mitigation strategies.
Prepare detailed risk assessment reports with findings, recommendations, and mitigation plans for management review.
Maintain accurate documentation of risk assessment activities, findings, and risk treatment plans.
Support audits and assessments to demonstrate adherence to cybersecurity standards.

Requirements

5+ years in cybersecurity with at least 3 years in risk management plus a degree (Required) or 7+ years in cybersecurity with at least 3 years in risk management without a degree (Required).
Strong grounding in cybersecurity principles, risk assessment methodologies, and threat landscape analysis.
3 years of experience managing a third‑party risk management program and team.
Proficiency in performing third‑party risk assessments and negotiating security language in contracts.
Knowledge of regulatory compliance requirements and industry standards.
Excellent analytical and problem‑solving capabilities.
Effective written and verbal communication to collaborate with multidisciplinary teams.
Experience in healthcare or other highly regulated industries is preferred.
Deep familiarity with frameworks such as NIST CSF, NIST 800‑53, ISO 27001, and HITRUST.
Understanding of healthcare regulations (HIPAA, HITECH) and their technical implications.
Experience with risk assessment methodologies and tools.
Knowledge of security technologies, controls, and best practices.
Experience with Governance, Risk, and Compliance platforms such as ServiceNow and OneTrus.

Technologies

NIST CSF
NIST 800‑53
ISO 27001
HITRUST
ServiceNow
OneTrus

Certifications and licensure

CISSP (preferred)
CISM (preferred)
CRISC (preferred)
CISA (preferred)

View full job page →

1mo ago

Manager -Cybersecurity Third Party Risk

Sentara Hospitals Fostoria, KS

Fostoria, KS

1mo ago Closed

$117k - $217k/yr Full time Manager Information Security InfoSec

This position is no longer accepting applications (closed Jul 22, 2026).

Job Description

The Manager - Cybersecurity Third Party Risk leads Sentara Hospitals' third-party risk management program, guiding onboarding, ongoing monitoring, and offboarding of vendors while enforcing security controls and maintaining contractual exhibits. The role prioritizes risk-based vendor categorization and continuous risk mitigation across the organization.

Responsibilities

Engage with management at all levels to present and discuss third-party risk posture and findings.
Conduct comprehensive risk assessments of third-party vendors according to risk profiles.
Lead a team of assessors responsible for vendor assessments and contract negotiations.
Identify, analyze, and prioritize risks by potential impact on operations, data, and reputation.
Develop and streamline the third-party risk management processes and workflows.
Identify vulnerabilities within vendor systems, networks, and applications.
Collaborate with IT, security, and compliance teams to design and implement risk mitigations.
Prepare detailed risk assessment reports with findings, recommendations, and mitigation plans for leadership.
Maintain accurate, up-to-date documentation of assessments, findings, and risk treatment activities.
Assist in audits and assessments to demonstrate compliance with cybersecurity standards.

Requirements

5+ years in cybersecurity with at least 3 years in risk management, with a degree (Required)
7+ years in cybersecurity with at least 3 years in risk management without a degree (Required)
Strong understanding of cybersecurity principles, risk assessment methodologies, and threat landscape analysis
3 years of experience managing a third-party risk management program and team
Proficiency in performing third-party risk assessments and negotiating contractual security language
Knowledge of regulatory compliance requirements and industry standards
Excellent analytical and problem-solving skills
Effective communication and interpersonal abilities for collaboration with multidisciplinary teams
Deep understanding of cybersecurity frameworks (NIST CSF, NIST 800-53, ISO 27001, HITRUST)
Knowledge of healthcare regulations (HIPAA, HITECH) and their technical requirements
Familiarity with risk assessment methodologies and tools
Understanding of security technologies, controls, and best practices
Experience with GRC platforms such as ServiceNOW and OneTrus

Technologies

ServiceNOW
OneTrus
NIST CSF
NIST 800-53
ISO 27001
HITRUST

Benefits

Medical, Dental, Vision plans
Adoption, Fertility and Surrogacy Reimbursement up to $10,000
Paid Time Off and Sick Leave
Paid Parental and Family Caregiver Leave
Emergency Backup Care
Long-Term and Short-Term Disability, and Critical Illness plans
Life Insurance
401k/403B with Employer Match
Tuition Assistance – $5,250/year and discounted education through Guild Education
Student Debt Pay Down – $10,000
Reimbursement for certifications and free access to CEUs and professional development
Pet Insurance
Legal Resources Plan
Annual discretionary bonus eligibility if system criteria are met

Location

Location: Fostoria, KS (onsite).

City / State field lists Norfolk, VA.

Work Shift

First (Days)

Remote Work Eligibility

Alabama
Delaware
Florida
Georgia
Idaho
Indiana
Kansas
Louisiana
Maine
Maryland
Minnesota
Nebraska
Nevada
New Hampshire
North Carolina
North Dakota
Ohio
Oklahoma
Pennsylvania
South Carolina
South Dakota
Tennessee
Texas
Utah
Virginia
Washington
West Virginia
Wisconsin
Wyoming

Certification / Licensure

CISSP (Preferred)
CISM (Preferred)
CRISC (Preferred)
CISA (Preferred)

View full job page →

Vendor Management Cybersecurity Jobs

Manager -Cybersecurity Third Party Risk

Manager -Cybersecurity Third Party Risk

Get Vendor Management Cybersecurity Jobs alerts