Third Party Cyber Security Assessor

• Performing information security reviews of third parties providing services to the bank
• Collecting and reviewing documentation, including playbooks and evidence during assessment
• Documenting controls in assessment work papers
• Evaluating third parties' information security risk
• Discussing information security gaps with third parties
• Managing relationships with third parties and Enterprise Vendor Managers
• Ability to travel up to 10-15%

• 3 Years experience in Information Security and/or IT Audit
• Technical writing and verbal communication skills
• Ability to effectively work with partners at varying knowledge and organization levels
• Technical skills in Security Controls, IT Compliance, SOX Compliance, Change Management, Enterprise Risk Management
• Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards
• Desired:
  Information Security certifications including ISO
  27002 / CISSP / CEH / CISM / CISA

Demonstrates expertise in Information Security and IT Audit, with a strong focus on evaluating third-party security risks and managing vendor relationships. Proficient in technical writing and communication, with a solid understanding of compliance standards and security controls.

• Information Security
• IT Audit
• Security Controls
• SOX Compliance
• NIST Standards

• Information Security
• IT Audit
• Security Controls
• SOX Compliance
• Change Management
• Enterprise Risk Management
• Technical Writing
• Verbal Communication
• Risk Evaluation
• Documentation

• Relationship Management
• Collaboration
• Communication

• ISO
  27002
• CISSP
• CEH
• CISM
• CISA

• NIST
• PCI
• ISO
• SDLC
• COBIT
• ITIL