Description

You will own the execution of security risk management processes across technology vendors and internal applications.

Responsibilities

• Support the Technology Vendor Management program, conducting technology risk reviews across multiple disciplines.
• Conduct security assessments of vendors, products, and applications, integrating security early in the lifecycle with systems owners.
• Coordinate the implementation of core security integrations (SSO, Event Logs, Secrets, Alerting, Threat Model, Backup/Recovery) across in-house and SaaS environments.
• Review business workflows with business groups to enhance security processes supporting those workflows.
• Develop and deliver key security metrics in coordination with IRM leadership to measure technical control effectiveness.

Required Skills

• 2-3 years in Information Technology and 2 years in cybersecurity risk management.
• Bachelor’s or Master’s Degree in a relevant field.
• Strong analytical skills to assess and prioritize vendor risks through due diligence.
• Familiarity with NIST, ISO27001, GDPR, CCPA, and certifications like SOC, PCIDSS, FedRAMP.
• Experience coordinating technical integrations for security tooling and processes.
• Ability to review complex systems architectures to identify security integration opportunities.
• Experience using security analytics tooling to produce operational metrics and dashboards.
• Understanding of servers, operating systems, cloud applications, and infrastructure operations.
• Proficiency with Microsoft Office Suite and JiRA.

Preferred Skills

• Familiarity with Third Party Risk Management tools like One Trust or SIG.
• Hands-on experience in Azure or AWS Cloud environments and core services.

Key Skills

Education

Bachelor's or Master's degrees