The Opportunity

Requirements Description and Requirements What You’ll Do

End-to-end vendor assessments: Own the full lifecycle—scope services with business and senior stakeholders, analyze questionnaire responses, perform control gap assessments, review third-party audit reports (e.g., SOC 1/2, ISO 27001), and generate actionable risk findings.
Risk remediation & tracking: Respond to findings, drive action plans to completion, and negotiate realistic due dates with vendors; maintain transparent reporting to management.
Technical security assessments: Assess systems, applications, data centers, cloud infrastructures, and service providers using established frameworks and tools; evaluate vulnerabilities and control maturity.

Required Skills & Qualifications

Mandatory Certification (at least one): CISA, CRISC, CISSP, ISO 27001 Lead Auditor/Implementer, CCSK/CCSP
Core experience:
4–10 years in Third-Party/Vendor Risk Management (VRM) or IT Security Audit
Strong grasp of control frameworks: ISO/IEC 27001/27002, SOC 2 Trust Services Criteria, NIST 800-53/CSF
Proficient in reviewing SOC 1/2 reports, ISO certificates, penetration test summaries, and remediation evidence

Hands-on with vendor questionnaires (e.g., SIG , custom controls**), evidence validation, and risk ratings

About MetLife Recognized on Fortune magazine's list of the "World's Most Admired Companies" and Fortune World’s 25 Best Workplaces™, MetLife, through its subsidiaries and affiliates, is one of the world’s leading financial services companies; providing insurance, annuities, employee benefits and asset management to individual and institutional customers. With operations in more than 40 markets, we hold leading positions in the United States, Latin America, Asia, Europe, and the Middle East.

Our purpose is simple - to help our colleagues, customers, communities, and the world at large create a more confident future. United by purpose and guided by our core values - Win Together, Do the Right Thing, Deliver Impact Over Activity, and Think Ahead - we’re inspired to transform the next century in financial services. At MetLife, it’s #AllTogetherPossible . Join us!