Link Group

Third-Party Cybersecurity Risk Specialist

26k - 32k PLN26 000 - 32 000 PLN/ mies./ mies.

SeniorHybryda·WarsawFull-time

#462459·Dodano 25 dni temu·1

Źródło: LinkGroup

Aplikuj teraz

Tech Stack / Keywords

NIST CSFNIST SP 800-53ISO 27001SOC 2AWS Azure GCPIAMSaaSTPRM

Podsumowanie oferty

Evaluate the security posture of third-party providers for a global alternative investment firm. Review technical controls, architectures and data flows, and support risk decisions using frameworks and standards including NIST CSF, ISO 27001 and SOC 2.

Wymagania

5+ years of hands-on experience in cybersecurity, technology risk, security engineering or third-party risk management (TPRM).
Proven track record of evaluating technical security controls, interpreting penetration test results and assessing architectural data flows.
Strong understanding of cloud security (AWS, Azure, GCP), SaaS solutions, IAM, network defense, vulnerability management and data protection.
Practical familiarity with security frameworks and standards such as NIST CSF, NIST SP 800-53, ISO 27001 and SOC 2.
Excellent analytical and communication skills, including the ability to explain complex technical risks to technical and business audiences.
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems or a related field; high commitment to professional ethics and confidentiality.

Nice to have:

Recognized security certifications such as CISSP, CISA, CRISC, CISM or CCSP.
Experience in financial services, investment banking, asset management or other highly regulated environments.
Familiarity with third-party risk management platforms such as OneTrust, ProcessUnity, Archer or Prevalent.

Obowiązki

Conduct technical security reviews of external vendors, SaaS providers and third-party technology partners.
Evaluate security controls, technical architectures, data flows and system integrations to identify potential security risks.
Review third-party audit documentation, SOC 2 reports, ISO certifications, penetration test results and vulnerability assessments.
Assess technical security measures across cloud environments, access management (IAM), networks, application security and incident response.
Identify control gaps, validate findings with stakeholders and evaluate proposed remediation actions.
Prepare structured risk assessment reports detailing findings, business impact and mitigation recommendations.
Partner with IT, Information Security, Legal, Compliance and Procurement teams to govern vendor security lifecycles.
Support enhancements to assessment workflows, reporting standards and risk methodologies.
Monitor emerging cyber threats, industry standards and regulatory expectations.

Link Group

532 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz