Vendor Security Specialist

Granite Solutions Groupe provides financial services decision makers with people and solutions that deliver. Our clients count on us to deliver the right talent at the right time to achieve critical business results. We leverage our industry knowledge and passion for client priorities to deliver human capital solutions.

GSG was founded in 1998 as a consulting firm delivering project management and technology solutions for the financial services industry. GSG now has a global presence, with team members deployed across the U.S. at Fortune 1000 companies and high-performing Fintech firms.

High-caliber consultants are the face of GSG at our client organizations and offices. We value the deep relationships we have with our consultants that enable us to place them in roles where their skills will have an immediate impact. The GSG consulting team is comprised of diverse, experienced, driven, and dynamic contributors who excel at getting things done.

We are seeking a talented and passionate

Security Contracts/Regulations and Third Party Security Specialist – GIS Governance, Risk & Compliance Consultant.

• Develop a deep understanding of the company's Data Security Addendum (DSA) for third-party contracts.
• Analyze third party modifications to the company's DSA and:
  • Develop/document a position on acceptable versus unacceptable modifications.
  • Propose alternative language that is acceptable to GIS leadership.
• Work closely with GIS leadership, legal, and third party relationship executives to:
  • Communicate the security impact to FT of third-party DSA modifications.
  • Effectively engage senior business and IT stakeholders with polished executive communication.
  • Negotiate DSA modifications with third parties to the extent permissible by GIS leadership and legal.
• Participate in conference calls as needed to finalize the DSA.
• Propose periodic updates to the DSA based on lessons learned from third party negotiations, emerging regulatory third-party security oversight requirements, and the evolving security threat landscape

• Research, monitor and analyze updates to existing international cybersecurity regulations and emerging/new cybersecurity regulations.
• Track regulations manually, map requirements to the company’s Security Policy and Security Program and Framework and identify misalignments.
• Propose updates to the company's Corporate Information Security Policy and Security Program and Framework based on identified misalignments.
• Document/Communicate the results to GIS leadership.
• Monitor industry wide Cybersecurity threat landscape for emerging threats
• Propose potential additional updates tothe company's Corporate Information Security Policy and Security Program and Framework that may be needed to address emerging threats.

• Conduct vendors security assessments for compliance with our firm’s information security policies, standards, and controls.
• Identify vendors security issues/non-compliance and recommend appropriate remediation activities to resolve them.
• Engage vendors IT and Cybersecurity leadership to further investigate identified security risks and negotiate their resolution.
• Communicate status/progress to business stakeholders.

• Overall 7+ years of industry experience in security contract negotiations, security regulations research/analysis, and third-party security assessments for large global financial organizations and their Cybersecurity teams.
• Deep experience in applying knowledge of Cybersecurity policies, Cybersecurity standards, Cybersecurity controls, Cybersecurity programs and frameworks to third party…