Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. 3-5 years of experience in Third-Party Risk Management (TPRM), Vendor Risk, Cybersecurity Risk, IT Risk, GRC, or Information Security assessments.