dotLinkers

Vendor Due Diligence Specialist

22k - 27k PLN22 000 - 27 000 PLN/ mies./ mies.UoPUmowa o pracę (brutto)

SeniorHybryda·WarszawaFull-time·Umowa o pracę

#467296·Dodano 8 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

CloudSaaSIdentity and Access Management

Podsumowanie oferty

Assess third-party information security risks for vendors and evaluate their security controls, technology environments and architectures. The role supports the company’s third-party risk management program, covering areas such as cloud, SaaS and identity and access management.

Wymagania

At least 5 years of experience in information security, technology risk, security engineering, security architecture or third-party risk management.
Experience conducting technical security assessments of third-party environments, including evaluating security controls and their effectiveness.
Bachelor’s degree in Information Security, Information Systems, Information Technology or a related field.
Strong understanding of cloud environments, SaaS solutions, identity and access management, network security, vulnerability management and data protection.
Knowledge of logging and monitoring, incident response, application security and technical security controls in complex IT environments.
Familiarity with security frameworks and standards such as NIST CSF, NIST 800-53, ISO 27001 and SOC 2.
Ability to analyze technical evidence, challenge vendor statements and independently assess security risks.
Strong analytical and communication skills, including the ability to explain complex security issues to different audiences.
Ability to work independently, manage multiple assessments simultaneously and collaborate with cross-functional teams.
High ethical standards and a responsible approach to handling sensitive information.

Obowiązki

Act as a technical subject matter expert within the third-party information security risk management program.
Conduct in-depth security assessments of new and existing vendors that access, process, store or transmit company information.
Evaluate the design and effectiveness of vendor security controls across different technology environments and service models.
Analyze business requirements, data flows, system integrations and technical architectures to identify potential security risks.
Review security documentation, including audit reports, certifications, penetration test results, vulnerability assessments, policies and architecture diagrams.
Assess controls related to identity and access management, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response and application security.
Work with vendors and internal technical teams to validate assessment responses, investigate security gaps and review remediation plans.
Prepare clear, risk-based assessment reports outlining identified issues, their potential impact and recommended actions.
Collaborate with Technology, Compliance, Legal, Procurement and other teams to maintain a consistent approach to third-party risk management.
Continuously improve assessment methodologies, processes, templates and metrics while staying up to date with emerging threats and security best practices.

Benefity

Sports card.
Private life insurance.
Private medical and dental care, including a vision allowance.
Private pension scheme.
Business travel accident insurance.
Employee Assistance Program.
Educational assistance and reimbursement.

Karta sportowa

Opieka zdrowotna

Ubezpieczenie

Dofinansowanie szkoleń

dotLinkers

26 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz