Description

You will manage security risks and third-party assessments to maintain organizational compliance.

Responsibilities

• Assess risk impacts using the NIST Cybersecurity framework.
• Review and assess SOC 2 attestations and policy exceptions.
• Make formal recommendations based on risk treatment findings.
• Evaluate how controls mitigate identified risks.
• Lead negotiations and manage conflict when communicating security requirements across the organization.

Required Skills

• 3+ years of experience in third-party risk management.
• 3-5 years of general cybersecurity risk experience.
• Knowledge of ISO 27001.
• Understanding of endpoint protection, vulnerability management, firewalls, and network segmentation.
• Familiarity with OWASP top 10 criteria.
• Bachelor's degree (B.Tech) in Computer Science or a related field, or equivalent cybersecurity work experience.
• Strong analytical, organizational, and interpersonal skills.
• Ability to lead negotiations and promote collaboration at various organizational levels.

Preferred Skills

• Experience with ServiceNow tools.
• Ability to create threat models.

Key Skills

Education

Not specified