IT Security Sr. Specialist II – Third Party Risk Management

Quest Diagnostics’ Third-Party Vendor Risk Management Program performs the critical function of assessing the risks of new and existing vendors. The IT Security Sr. Specialist II will be responsible for working with business partners and purchasing to evaluate the risk posture of the vendors and to ensure that appropriate risk assessments, the contract and ancillary risk assessment documents are reviewed and implemented. 

General Job Responsibilities:

• Conduct supplier risk assessments in line with Quest Diagnostic’s IT Security Policies and Procedures including due diligence, risk evaluation, findings management, and remediation.
• Quality Assurance efforts including but not limited to data integrity, metrics development, findings management, reassessment tracking and vendor off-boarding. 
• Contribute to third-party risk management program development and process enhancements
• Develop working knowledge of Quest Diagnostics business and operations to ensure alignment of due diligence reviews and risk assessments with the needs of the business
• Special Projects as assigned