Supervisor, IT Security Vendor Risk Management

Job Description Summary This role provides essential leadership oversight to ensure consistent coverage and quality of IT Security Vendor Risk Assessments while improving coordination, standardization, and risk‑based prioritization. Dedicated supervision will drive measurable time reduction through operational efficiencies, reduce rework and process overhead, and enable senior leaders to focus on program strategy and regulatory readiness. Job Description This position follows our hybrid workstyle policy: Expected to be in a Raymond James office location a minimum of 10-12 days a month. Please note: This role is not eligible for Work Visa sponsorship, either currently or in the future. Technical Skills/Experience: Foundational experience in IT security, vendor risk management, third party risk, or similar risk functions Working knowledge of core information security and technology risk domains sufficient to review assessments, identify gaps, and escalate complex issues appropriately. Familiarity with internal policies, standards, and common regulatory expectations impacting third party risk management, with the ability to follow established procedures and recognize potential non compliance trends for escalation. Ability to apply basic risk concepts (inherent risk, control effectiveness, residual risk) to support consistent risk ratings and clear, defensible assessment outcomes. Experience reviewing and validating the work of others for completeness, accuracy, and adherence to standards, and providing constructive feedback to improve assessment quality and consistency. Developing people leadership skills, including task prioritization, workload coordination, coaching junior team members, and tracking team deliverables against defined timelines and objectives. Strong written and verbal communication skills, with the ability to summarize assessment results and risks in clear, business appropriate language for stakeholders and management. Responsibilities: Leads a team responsible for conducting risk based due diligence assessments for third party supplier engagements Oversees the evaluation of information security and technology risks associated with vendors, products, and services Ensures vendor risk outcomes align with the firm’s risk appetite and regulatory obligations Accountable for the quality, consistency, and timeliness of vendor risk assessments Translates technical and regulatory findings into clear risk conclusions and actionable recommendations