AddressFueled by our shared passion and expertise, CDW delivers innovative technology solutions for our customers. We’re also committed to fostering an environment that embraces collaboration, celebrates integrity, inclusivity, and individuality, and paves the path for personal and professional growth. Experience a life in balance and join us on the journey forward.
Your role at CDW is of the utmost importance to the company’s mission, objectives, and reputation. As a Senior GRC Consultant I, you will provide technical expertise and support functional areas within Security Risk Management (SRM) to minimize risk and optimize our compliance efforts. Your ability to work seamlessly in a high-velocity environment, preform contract reviews, assess third-party risks, and improve existing processes, will be essential to our success.
The ideal candidate has a strong background in information security compliance, third-party risk management, and contract security reviews and is focused on continuous process improvement and building strong stakeholder relationships.
What you will do:
- Independently review and revise information security clauses in customer and vendor contractual agreements to ensure compliance with company policies.
- Independently review and respond to customer solicitations and questionnaires related to information security compliance.
- Monitor and report any contract information security compliance issues to leadership.
- Conduct third-party security risk management activities, including assessing third-party security risks.
- Thrive in a fast-paced work environment, remaining composed and effective under pressure.
- Stay informed regarding industry trends, regulations, and best practices in third-party risk management and information security compliance to drive ongoing improvements.
- Inform business stakeholders of information security risks and requirements by translating them into business terms.
- Facilitate risk discussions, provide guidance, and promote risk-aware decision-making.
- Timely and complete execution of all assigned work, meeting all defined targets, objectives, and SLAs, to support day-to-day SRM capabilities/programs.
What we expect of you:
- We value experience, skills, drive, aptitude, and attitude over university degrees and certifications.
- 5 years’ experience in information security, third-party risk management, contract review or related roles.
- Strong analytical, critical thinking, and problem-solving skills
- Strong attention to detail and ability to understand legal requirements in contracts.
- Strong knowledge of multiple regulatory requirements and compliance frameworks (NIST, ISO, SOX, SOC, PCI, GDPR, etc.)
- Excellent understanding of information security principles, risk assessment methodologies, and security controls
- Experience with GRC tools and platforms is preferred.
About us
We make technology work so people can do great things.
CDW is a Fortune 500 technology solutions provider to business, government, education, and healthcare organizations across the globe. At CDW, we make it happen, together. Trust, connection and commitment are at the heart of how we work together to deliver for our customers. It’s why we’re coworkers, not just employees. Coworkers who genuinely believe in supporting our customers and one another. We collectively forge our path forward with a level of commitment that speaks to who we are and where we’re headed. We’re your long-term, full-stack, full-lifecycle technology partner. We have the experience, expertise, scale, relationships and deep industry knowledge to bring just about any vision to life. Together, we can deliver the full promise of what technology can do. Together, we Make Amazing Happen.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
