Lead Service Consultant – Supplier Security Due Diligence & Monitoring Service

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Lead Service Consultant – Supplier Security Due Diligence & Monitoring Service based in United States.**

This role offers the opportunity to work at the intersection of cybersecurity, legal, procurement, and enterprise risk management, helping shape secure supplier relationships across a large organization. As a senior individual contributor, you will provide expert guidance on contractual security requirements, support complex supplier negotiations, and promote consistent governance practices. You will collaborate with cross-functional stakeholders to balance business objectives with information security expectations while contributing to the evolution of a mature, scalable supplier risk program. This is an excellent opportunity for professionals who enjoy translating technical security concepts into practical business solutions and driving continuous process improvement in a collaborative, remote environment.

### Accountabilities

• Provide subject matter expertise on information security requirements during supplier contract negotiations and redline reviews.
• Translate supplier security risk assessment results into practical contractual recommendations aligned with enterprise risk standards.
• Review and evaluate supplier-proposed contract language, ensuring compliance with established security policies and governance requirements.
• Apply approved fallback language and guide stakeholders through security-related contract negotiations.
• Document security exceptions, risk acceptance decisions, contractual deviations, and non-standard positions following governance procedures.
• Facilitate escalations and governance reviews for contractual terms that exceed approved risk tolerances.
• Partner closely with cybersecurity, legal, procurement, supplier management, enterprise risk management, and business teams to support informed contracting decisions.
• Serve as a trusted advisor for complex supplier security due diligence engagements and contractual risk discussions.
• Contribute to the development of service documentation, operating procedures, templates, knowledge resources, and training materials.
• Analyze trends, recommend process improvements, and support reporting, quality assurance, and continuous service enhancement initiatives.

## Requirements

• Experience in third-party risk management, supplier security assessments, cybersecurity governance, technology risk management, procurement, legal operations, or contract management.
• Strong understanding of information security principles and the ability to translate technical risks into practical contractual and business guidance.
• Proven experience collaborating with cross-functional stakeholders, including legal, procurement, cybersecurity, and enterprise risk management teams.
• Strong analytical, negotiation, communication, and stakeholder management skills.
• Experience supporting governance processes, exception management, policy interpretation, and control assessment activities.
• Ability to influence decision-making, build consensus, and navigate complex enterprise environments with multiple stakeholders.
• Strong organizational skills with the ability to manage competing priorities while maintaining accuracy and attention to detail.
• Self-motivated, collaborative, and committed to delivering high-quality, risk-aligned solutions in a remote work environment.

## Benefits

• Fully remote position within the United States.
• Competitive annual salary ranging from **$90,700 to $153,925**, based on experience and qualifications.
• Comprehensive technology package, including laptop, monitors, headset, keyboard, and mouse.
• Monthly internet connectivity reimbursement for eligible remote employees.
• Comprehensive health and wellness benefits.
• Opportunities for professional growth, continuous learning, and career development.
• Collaborative, inclusive, and innovation-driven work environment.
• Meaningful opportunities to contribute to enterprise cybersecurity, supplier governance, and risk management initiatives.