Senior Third Party Cyber and Information Security Analyst

950 - 1000 PLN/ dzień./ dzień.B2BB2B (netto)

MidHybryda·KrakówInne·B2B

#469344·Dodano 7 dni temu·2

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Cybersecurity

Podsumowanie oferty

You will evaluate remediation of third-party cybersecurity control gaps and review evidence to determine whether vendor security threats have been addressed in line with client policies. The role is in the CISO/TP CIS Oversight Remediation Team, supporting improvements to the risk assessment process and remediation measures.

Wymagania

Bachelor's degree and a professional certification in cybersecurity, audit, cloud security, or a related field.
Audit experience or mindset.
5+ years of experience in third-party risk assessment or cybersecurity assessment, and regulatory and audit issue closure.
Experience in business risk management or closing regulatory and audit issues in NFRI/operational risk in line with standard procedures.
Experience with cyber technology risk assessments of third-party vendors to identify potential security threats and vulnerabilities.
Experience analyzing and evaluating vendor security controls, policies, and procedures for compliance with regulatory requirements and industry best practices.
Ability to develop and implement risk mitigation strategies for identified vulnerabilities and cyber threats.
Ability to communicate assessment findings and recommendations, including control requirements, to internal stakeholders such as senior management, legal, and compliance teams.
Ability to monitor vendor compliance with security policies and procedures through ongoing assessments.
Ability to monitor and suggest remediation requirements to third parties and business stakeholders.
Ability to communicate effectively with technical and non-technical stakeholders.
Strong analytical and problem-solving skills.
Good spoken and written English.
Ability to collect data, coordinate tasks, and lead projects.
Risk identification and articulation skills; ability to build and maintain stakeholder relationships, take initiative, make logical decisions, and stay goal-oriented during uncertain times.

Nice to have:

CTPRP, CISSP, or CISA certification.
Experience with industry-recognized IT security standards and practices, including NIST, ISO 27001, PCI DSS, COBIT, and SOC 2.
A professional qualification such as CEH, CISSP, CISA, CISM, CRISC, or ITIL.

Obowiązki

Evaluate remediation of cybersecurity control gaps identified through CIS risk assessments involving third-party vendors with access to sensitive information or systems.
Review evidence submitted to close Risk Treatment Plans and assess whether third-party security threats have been appropriately remediated under client policies and procedures.
Support colleagues, including Risk Taxonomy Owners, Compliance & Operational Risk Controllers, and Outsourcing & Supplier Management, in improving the risk assessment process and implementing remediation measures.

INFOPLUS TECHNOLOGIES

35 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz