Third Party Risk Assessor

Third Party Risk Assessor page is loaded## Third Party Risk Assessor locations:
Scottsdale time type:
Full time posted on:
Posted Yesterday job requisition :
REQPositions located in Scottsdale, San Francisco, Chicago, or New York follow a hybrid work model to allow for a more collaborative working environment.

Candidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.
**** Overall Purpose
******** Essential Functions
***** Adhere to , implement and manage third party risk assessment program processes in a manner that aligns with the strategic goals of the organization.
* Develop and engage in positive business relationships with external business partners and internal stakeholders to understand third party relationships.
* Develop an understanding of the service provided and/or received to assess and determine appropriate risk ratings.
* Drive all aspects of the risk assessment of the third party.
* Coordinate and respond to new and existing customer requests for onsite audits. Complete security, compliance or governance-related questionnaires.
* Apply knowledge in security and regulatory frameworks (e.g., ISO 27000, GLBA, FFIEC, FDIC, NIST, etc.) to improve third party risk identification, assessments and reporting.
* Assess compliance with information technology (IT) controls by examining and analyzing records, reports, operating practices and documentation to determine risk ratings affecting compliance status.
* Write comprehensive, articulate and objective assessments, reviews, and audit reports outlining methodology, analysis and recommendations.
* Identify control breaks and vulnerabilities with third parties.
* Create meaningful reports to effectively communicate and relate security, compliance, or governance-related concepts and controls across a variety of audiences including technical and non-technical audiences.
* Effectively communicate and coordinate planning, preparation, execution, review and remediation phases of third party assessment activities.
* Support the company’s commitment to protect the integrity and confidentiality of systems and data.
**** Minimum Qualifications
***** Education and experience typically obtained through completion of a Bachelor’s degree in Computer Science, Management Information Systems or related field.
* A minimum of 3 years of experience in IT Risk, Audit, Information Security or Assurance and strong audit/technical evaluation experience with various types of systems and networks.
* Strong cross-functional project management skills.
* Attention to detail and ability to plan organize and prioritize workloads.
* Highly motivated self-starter with the ability to work independently or within a team environment.
* Effective written and verbal communication skills, interpersonal and collaboration skills and ability to support complex organizational relationships.
* Strong working knowledge of information security, risk, compliance and governance principles and issues.

The above job description is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow instructions and perform other related duties as assigned by their supervisor.
**** Preferred Qualifications
***** Professional information security certification (e.g., Certified Information Security Manager- CISM, Certified Information Systems Security Professional – CISSP, Certified Information Systems Auditor-CISA, Certified Third Party Risk Professional- CTPRP).
* Broad banking understanding and knowledge of security approaches that support operational processes.
* Experience with OCC, ISO, GLBA, FFIEC, NIST and other pertinent compliance regulations and guidelines.
* Experience with a variety of IT security technologies
* Experience with Shared Assessments Standard Information Gathering Questionnaire (SIG) and processes.
* Additional related education and/or experience.
**** Physical Requirements
**** Working conditions consist of a normal office environment. Work is primarily sedentary and requires extensive use of a computer and…