Yard Corporate

IT Security Risk Specialist (Third-Party)

25k - 35k PLN25 000 - 35 000 PLN/ mies./ mies.UoPUmowa o pracę (brutto)

MidHybryda·WarszawaFull-time·Umowa o pracę

#463682·Dodano 14 dni temu·7

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Information SecurityTechnical RiskSecurity EngineeringSecurity ArchitectureTPRMCloudIAMData protectionSecurity assessmentsAI

Podsumowanie oferty

Assess third-party security risks for Cloud, SaaS, and AI vendor solutions at a global financial institution. Join a global Technology Governance and Risk Management team to review architectures and technical evidence and challenge vendors.

Wymagania

5+ years of experience in Information Security, Technology Risk, Security Engineering, Security Architecture, or technical TPRM.
Proven experience independently conducting technical security assessments of third-party environments.
A Bachelor’s degree or higher in IT, Information Security, or a related field.
Strong understanding of Cloud (SaaS/IaaS), IAM, network security, data protection, and incident response.
Practical experience or a strong understanding of assessing AI/GenAI vendor solutions or using AI tools in daily work.
Familiarity with NIST CSF, NIST 800-53, ISO 27001, and/or SOC 2.
Ability to critically analyze technical evidence and confidently challenge third-party assertions.

Nice to have:

Previous experience in the financial or banking sector.
Familiarity with TPRM platforms such as OneTrust, ServiceNow, or SIG.
Industry-recognized security certifications such as CISSP, CISM, CISA, or CCSP.

Obowiązki

Technical Assessments:

Perform in-depth, hands-on security assessments of new and existing third parties, focusing on Cloud and SaaS environments.

Architecture & Evidence Review:

Analyze data flows, system integrations, assurance reports (SOC 2, ISO 27001), penetration test results, and vulnerability scans.

Security Control Evaluation:

Assess IAM, Network Security, Vulnerability Management, Data Protection, and AppSec.

Challenging & Validating:

Engage with external vendors' engineering teams to validate security assertions, investigate gaps, and evaluate remediation plans.

Reporting & Collaboration:

Produce concise, risk-based reports and partner with Technology, Compliance, Legal, and Procurement teams.

Inne informacje

The recruitment process has four stages: Hiring Manager, 2–3 technical team interviews, and Senior Manager.
Candidates with a three-month notice period are welcome.

Yard Corporate

20 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz