IT Vendor Risk Management Consultant (NYC on site)
About Sikich
Sikich offers the public and private sectors a varied platform of professional services across consulting, technology and compliance. Highly specialized and hands-on teams deliver integrated solutions rooted in deep industry experience. Our approach is strategically and thoughtfully designed to help our clients, teams, and communities accelerate success.
Position Summary
We are seeking an experienced Technology Vendor Risk Management Consultant to support the assessment and oversight of third-party technology vendors. This individual will play a critical role in evaluating vendor control environments, reviewing audit reports, and identifying risks related to outsourced technology services.
Key Responsibilities
- Perform risk assessments and due diligence reviews of technology vendors, with a focus on Tier 2 and Tier 3 supplier relationships.
- Review and analyze SOC 1 and SOC 2 reports to evaluate the effectiveness of vendor control environments.
- Assess IT General Controls (ITGCs) within SOC reports and identify potential control gaps or areas of concern.
- Identify and document relevant Complementary User Entity Controls (CUECs) and communicate requirements to business stakeholders.
- Evaluate vendor security, compliance, operational, and technology risks in accordance with organizational risk management standards.
- Maintain accurate vendor risk records and upload assessment results, supporting documentation, and findings into the UpGuard platform.
- Collaborate with Information Security, IT, Compliance, Internal Audit, and business stakeholders to ensure vendor risks are appropriately documented and managed.
- Prepare risk summaries, recommendations, and remediation tracking documentation for leadership review.
Preferred Qualifications
- Experience in Technology Vendor Risk Management (TVRM), Third-Party Risk Management (TPRM), IT Audit, or Information Security.
- Strong understanding of SOC 1, SOC 2, ITGCs, and CUECs.
- Experience performing vendor due diligence and risk assessments across technology and SaaS providers.
- Familiarity with risk management platforms such as UpGuard, Archer, ServiceNow, or similar GRC tools.
- Excellent analytical, documentation, and stakeholder communication skills.
Ideal Candidate Profile: The ideal candidate combines technical audit expertise with strong vendor governance experience and can independently evaluate third-party control environments, identify key risks, and provide actionable recommendations to strengthen the organization's vendor risk management program.
In compliance with this state’s pay transparency laws, the hourly rate range for this role is $70 – $80 – $100. This is not a guarantee of compensation or salary, as final offer amount may vary based on several factors including but not limited to experience and geographic location.
Sikich Total Rewards
Our contract team members enjoy benefits ranging from competitive hourly rates and insurance options to a flexible time off policy based on contract length, to name only a few. Sikich also takes pride in prioritizing team members’ health, total wellbeing and time spent with family, friends and in the pursuit of personal goals, hobbies, and endeavors.
Want to learn more? Visit our Careers website or Glassdoor profile.
Sikich is an Equal Opportunity Employer M/F/D/V
Sikich practices in an alternative practice structure in accordance with the AICPA Professional Code of Conduct and applicable law, regulations, and professional standards. Sikich CPA LLC is a licensed CPA firm that provides audit and attest services to its clients, and Sikich LLC and its subsidiaries provide tax and business advisory services to its clients. Sikich CPA LLC has a contractual arrangement with Sikich LLC under which Sikich LLC supports Sikich CPA LLC’s performance of its professional services. Sikich LLC and its subsidiaries are not licensed CPA firms.
“Sikich” is the brand name under which Sikich CPA LLC and Sikich LLC provide professional services. The entities under the Sikich brand are independently owned and are not liable for the services provided by any other entity providing services under the Sikich brand. The use of the terms “our company”, “we” and “us” and other similar terms denote the alternative practice structure of Sikich CPA LLC and Sikich LLC.
Securities offered through Sikich Corporate Finance LLC, member FINRA/SIPC. Investment advisory services offered through Sikich Financial, an SEC Registered Investment Advisor.
Copyright © 2025 Sikich LLC. All rights reserved.