Description

Manage third-party risk assessments and organizational compliance using the NIST Cybersecurity framework.

This role is on-site.

Responsibilities

• Assess risk impacts and evaluate how controls mitigate identified vulnerabilities.
• Review SOC 2 attestations and policy exceptions to ensure adherence.
• Make formal recommendations based on risk treatment findings.
• Lead negotiations and manage conflict when communicating security requirements across the organization.

Required Skills

• 3+ years of experience in third-party risk management.
• 3-5 years of general cybersecurity risk experience.
• Knowledge of ISO 27001 standards and the NIST Cybersecurity framework.
• Understanding of endpoint protection, vulnerability management, firewalls, and network segmentation.
• Familiarity with OWASP Top 10 criteria.
• Bachelor's degree (B.Tech) in Computer Science or a related field, or equivalent cybersecurity work experience.

Preferred Skills

• Experience with ServiceNow tools.
• Ability to create threat models.

Key Skills

Education

Not specified