Supplier Risk and Compliance Coordinator job in Richmond, VA
Richmond, VA CorTech LLC
| Job Ref: | 366801 |
| Employer: |
CorTech LLC |
| Job Type: | Contract |
| Salary and Benefits: | 43.00/Per Hour |
| Remote: | No |
Location |
|
| City: | Richmond, VA |
| Post Code: | 23218 |
| Map: |
|
Description |
|
|
JobsRUs.com is seeking to hire a Supplier Risk and Compliance Coordinator for our client in Richmond, VA! Benefits Available! Weekly Pay! Remote Position - Must be located in Richmond, VA! Pay Rate - $40-46.50/hr Job Description 1. Create a Supplier Decommissioning Procedure (with clear steps, expectations and timelines, and Roles & Responsibilities) 2. Communicate the Supplier Decom Procedure to the appropriate stakeholders (including Supplier Managers, etc.,) 3. Enforce the Supplier Decom Process 4. Develop Annual Report of Supplier Decom & Status, and communicate to the appropriate stakeholders (including managers of the Supplier Managers, etc.,) 5. Evaluate Sirion to Archer Data feed for terminated or expired Contracts 1. Ensure supplier managers follow up with suppliers to request copy of the following documents and upload them to Archer engagement record: a. High Risk Supplier Engagement ? Annual Pen Test Report(s) and SOC 2 Type II report. **Note, please refer to the SISE or SISPE in the active agreement with supplier to determine which documentation the supplier is obligated to provide on an annual basis (such as Pen Test, SOC 2 Type II, ISO, etc.,) b. Moderate Risk Supplier Engagement ? Annual self-certification or self-attestation letter stating supplier is complying with requirements as agreed to per contract. **Note, please refer to the SISE or SISPE in the active agreement with supplier to determine which documentation the supplier is obligated to provide on an annual basis, due to some suppliers will agree to provide a SOC II Type II report or ISO cert (and the like) 2. Review Pen Test and SOC II Type II reports to identify critical and high-risk issues still pending remediation 3. Notify BISO and business of open issues (where the issues are either partially treated or still pending treatments) 4. Manually register issues into Archer GRC platform (when needed) Assist in develop monthly schedule (6 to 12 assessments) for each calendar month. Track and report on status weekly. This includes coordination with supplier managers, suppliers, and 3rd party assessment providers to inform them of their tasks, their deadlines and hold them accountable to the deadlines with support from the Supplier Risk Manager. a Requires 2+ years of related experience Top 3 Skills Great communication skills Ability to balance multiple tasks simultaneously Works well with a small team | |
ref: (366801)
less than 2 minutes ago
Back to search results