Posting Details

Please view posting details below. To apply to this posting, please click the link above.

Position Information

Job Title Third-Party Vendor Risk Specialist Posting Number F006363 Position Status Full Time Assignment Length Not Applicable Grant Funded No Category APT Class Code 14 Starting Pay Commensurate with education and experience. Special Note Commensurate with education and experience. Location District, Trinity River Department DT Info Security Office Job Summary Reporting to the District Director of Information Security, The Third-Party Risk Specialist is responsible for the third-party risk management program to measure, monitor, assess, and report on the control of third-party vendor risk throughout the college. The position will develop key relationships with all internal departments, divisions, and federal and state regulatory agencies. Primary Duties and Responsibilities Essential Performance Requirements* Maintains a comprehensive third-party risk management program that ensures alignment of information security controls and regulations required by the College for contracts and access to TCC information systems are drafted, approved, and maintained Collaborates and interfaces with third-parties, the Procurement department, and other college subject matter experts to collect, analyze, and document information security assessments in the onboarding of new vendors and the monitoring of existing vendors Ensures that third-party information risks statuses are accurate and up-to-date as tracked in the governance, risk, and complaince (GRC) software; uses tracked information to manage assessments and report risks Assesses controls against regulatory requirements and expectations of regulators relating to TPR Collaborates with information security GRC and privacy disciplines to ensure that TPR are included in risk assessments performed by those functions, including privacy evaluations Assists the IT Security Compliance Officer with the creation and maintenance of GRC portal registration, onboarding, tracking mechanisms, and other items as required Collaborates with the Procurement department to ensure deficiencies in TPR areas are corrected, remediated, and monitored; participates with committees and other groups relating to third-party risk (TPR) Coordinates periodic reporting of TPR risks to the Director of Information Security while collaborating with risk and compliance partners in the preparation of regular reporting for TPR Key Risk Indicators (KRI)

General Supervision and Management Provides direction, guidance, and support to all internal customers and external vendors in compliance with TCC third-party risk regulations
Service Excellence Participates on behalf of the College in external community organizations and associations Attends the workplace regularly, reports to work punctually, and follows a work schedule to keep up with the demands of the worksite Completes all required training and professional development sessions sponsored through Tarrant County College (TCC) Supports the mission, values, goals, and principles of the College
Supervision
Works under the general supervision of District Director of Information Security

*Performs other related tasks as required

The duties listed are intended only as illustrations of the various types of work that may be performed. The omission of specific statements of duties does not exclude them from the position if the work is similar, related or a logical assignment to the position. The job description does not constitute an employment agreement between the employer and employee and is subject to change by the employer as the needs of the employer and requirements of the job change. Required Minimum Qualifications Bachelor’s degree and two (2) years working experience related to the Essential Performance Requirements; or any equivalent combination of education, training, certification, and work-related experience Preferred Qualifications At least one (1) of the below certifications: Certified Information Systems Auditor (CISA) Certified Cybersecurity Operations Analyst (CCOA) Certified Information Systems Security Professional (CISSP) Certified Third-Party Risk Professional (CTPRP) Certified Risk and Information Systems Control® (CRISC) ITIL v4 Concepts certification

Knowledge, Skills and Abilities Knowledge of Governance, Risk, and Compliance (GRC) software systems Skilled in excellent customer service and interpersonal relationships including strong listening, verbal, and written communication Skilled in using computer applications and enterprise systems, including Information Service Management (ITSM) systems as well as the Microsoft Office suite Ability to work effectively in a collaborative environment either independently or as part of a team Ability to think critically to effectively solve and communicate problems in a fast-paced environment where the demands for work are varied, and unpredictable in scope and volume Ability to analyze data and provide sound recommendations based on policy, procedure, practice, and existing regulations while exhibiting strong attention to detail, organization, and accuracy Ability to delegate work appropriately to faculty and staff to meet College and campus deliverables Ability to maintain a high level of diplomacy and tact, ensuring confidentiality and discretion Physical Demands and Work Environment Physical DemandsThe physical demands described here are representatives of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is frequently required to sit; use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; and talk or hear. The employee is occasionally required to stand, walk, and climb or balance. The employee must occasionally lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.
Work EnvironmentThe work environment characteristics described here are representatives of those an employee encounters while performing the essential functions of this job. While performing the duties of this job, the employee occasionally works near moving mechanical parts and is occasionally exposed to risk of electrical shock. The noise level in the work environment is usually quiet. Accommodations Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties and responsibilities. Special Instructions Summary Posted 11/15/2024 Posting Contact Summary

Should you have questions specific to this position please contact the following individual

Contact Rick Barras * rick.barras@tccd.edu Applicant Documents Required Documents Resume / Curriculum Vitae Optional Documents Cover Letter Unofficial Transcripts Certification / License Military/Foster Care Preference Documentation Posting Specific Questions

Required fields are indicated with an asterisk (*).

* Please select the highest level of education you have completed. High School Diploma / GED 60 or more College Credit Hours Associate's Degree Bachelor's Degree Master's Degree Doctorate Degree None of the above * Please list any certification or licensure you have that is directly related to this position.

(Open Ended Question)

* How many years of working experience do you have related to the Essential Performance Requirements? None Less than 1 year of experience 1 year of experience 2 years of experience 3 years of experience 4 years of experience 5 or more years of experience * Please describe your experience (responses are used to determine eligibility).

(Open Ended Question)

* How would you rate your experience with web-based software? Advanced Intermediate Beginner None * How would you rate your level of experience using word processing, spreadsheet and presentation software (i.e. Microsoft Word, Excel, PowerPoint)? Advanced Intermediate Beginner None * How long have you been in your current role with TCC? Less than 6 months More than 6 months I am not a current TCC employee I am a current TCC student employee