Junior Cybersecurity Risk Management Consultant (Remote)

About the role

We are looking for a Junior Cybersecurity Risk Management Consultant to join Del Oro Consulting’s remote team. In this role you will support the day‑to‑day operations of a large enterprise Third‑Party Risk Management (TPRM) program, ensuring vendor security assessments are completed efficiently and in line with our security and compliance standards.

Key responsibilities

• Onboard new third‑party vendors into the TPRM program and verify completeness of intake requests.
• Coordinate distribution, collection and tracking of vendor security questionnaires and assessment documentation.
• Monitor assessment progress, follow up on outstanding evidence and update records in ServiceNow.
• Maintain organized repositories of vendor security policies, certifications and supporting evidence.
• Track remediation activities, validate security controls against requirements and report status to internal stakeholders.
• Support daily operational tasks assigned by the TPRM Manager and ensure work is completed on schedule.

Required profile

• 3+ years of experience in Third‑Party Risk Management, Vendor Risk Management, Cybersecurity Risk Management or GRC.
• Strong organizational skills with the ability to manage multiple assessments simultaneously.
• Excellent written and verbal communication, capable of interacting directly with vendors and internal teams.
• Attention to detail and ability to maintain accurate documentation.

Required skills

• ServiceNow platform for workflow and record management.
• Familiarity with industry security questionnaires such as SIG, CAIQ and custom questionnaires.
• Understanding of cybersecurity controls and vendor risk assessment processes.