Senior Third party risk and controls management Engineer

Senior Third Party Risk And Controls Management Engineer

Duration-W2 Only

Location-Plano, TX (Last option is Washington, DC)/Hybrid

Must Have:
Tech Expertise in Cyber Security, Cloud Security and IAM

Must Have:
Cloud Security, Third Party Risk, Gap analysis and risk assessments, Operational/Data Risk, Application Controls, App Security, App Development with Secure Code and Static Code.

-IAM/PAM and Penetration Testing is a huge Plus

Certifications:

SANS, Security+ (Plus), CISSP or similar

Job Description:

• Strong working knowledge of operations practices, risk management processes, principles, architectural requirements and threats and vulnerabilities in the context of Cybersecurity as well as incident response handling methodologies as they apply.
• Strong knowledge of national and international laws, regulations, policies and ethics as they relate to Cybersecurity and specifically in the financial industry.
• Expert in their field; keeps technical skills current, participates in multiple forums
• May be multiskilled across the full range of team functions.
• Strong understanding of Agile, with the ability to work under at least one of the common frameworks.
• Knowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities along with the ability to identify systemic security issues.
• Provides indepth analysis of vulnerabilities, threats, designs, procedures and architectural design with focus on recommendations for enhancements or remediation with skill in using network analysis tools.
• Compliance required for local, country, and/or region specific standards for credentials, certifications and/or training.

Additional

Skills:

• Cloud security, identify and access management, third party risk management, vulnerability management.

Roles and Responsibilities:

• The third party risk and controls management analyst will be responsible for conducting deep dive technical risk reviews of client's highest risk suppliers.
• Working across multiple systems of record, this role will identify areas of technical risk to the business by analyzing IT architectures, security controls, evolving industry practices, etc. and document where controls do not exist or need improvement.
• These technical deepdive reviews will then been evaluated against technical and business resilience planning, incident response plans, and cyber intelligence reporting.