Third Party Info Security Risk Consultant

Overview

On Site
USD 35.00 - 45.00 per hour
Full Time

Skills

Finance
Documentation
Procurement
Onboarding
Regulatory Compliance
Security policy
Cyber security
Risk assessment
Auditing
Security controls
Risk analysis
Communication
Risk management
Organized
Project management
Management
Information Technology
Information security
Analytical skill
Problem solving
CISSP
CISA
CISM
ISACA
Cisco Certifications
Cisco
TOGAF
McAfee
Taxes
Life insurance
Collaboration
Partnership
Law

Job Details

Description
The Third-Party Cyber Assurance (TPCA) function within the financial service client's infosec team is responsible for oversight of third-party security programs, including assessing third party security programs and maximizing protections for all aspects of security for the third party landscape. The TPCA assessment team member will assist in assessment scope determination, meeting with enterprise vendor manager and vendor to prepare them for the assessment, documentation collection (e.g. TruSight or vendor provided policies/procedures) and preparation of assessment work-papers.
The primary responsibility will be to ensure each third party is prepared for the assessment and gather an understanding of the third party security environment; you'll meet with Enterprise Vendor Managers and Third Parties and act as single point of contact to prepare the vendor for the assessment and answer detailed questions. You will talk with the Third Parties security team to understand control environment, control strength and health and review information security policies/procedures for completeness. Based upon your meetings, you will populate the assessment workpapers with your information for the third-party assessors to document gaps and determine remediation approaches.
The infosec team needs to support a change led by Global Third-Party Procurement to onboard ~1,300 FLU managed Third Parties into their Program. These third parties currently fall outside the scope of the current GTPP Program, and are not supported with TPCA assessments. TPCA will need to hire additional staff to execute the assessment for the newly added third parties, per the requirement that once a Third Party is loaded into the GEP contract system an Assessment is required within 6 months. GTPP is beginning onboarding in January 2025.
Skills
Risk assessment, Information security, Audit, Third party risk, Security controls, Risk analysis, Security, Compliance, Risk management, Nist, Security policy, Cyber security
Top Skills Details
Risk assessment,Information security,Audit,Third party risk,Security controls,Risk analysis
Additional Skills & Qualifications
Required Skills
Background in information security or risk management
Outstanding verbal and written communication skills
Ambitious, disciplined, hardworking, resilient and willing to learn
Risk management focused with a passion for excellence and positive team attitude
Ability to think logically
Highly organized and project management skills
Strong time management skills
Desired Skills
Bachelor's degree in Information Technology, information security or related field
Strong analytical skills/problem solving/conceptual thinking
Ability to work with technical and non-technical business owners
Optional Certifications: CISSP (ISC2), CISA, CRISC, CISM (ISACA), CCIE (Cisco), TOGAF, CCTA (McAfee), CCFP (ISC2).
Pay and Benefits
The pay range for this position is $35.00 - $45.00
Medical, dental & vision
Critical Illness, Accident, and Hospital
401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
Life Insurance (Voluntary Life & AD&D for the employee and dependents)
Short and long-term disability
Health Spending Account (HSA)
Transportation benefits
Employee Assistance Program
Time Off/Leave (PTO, Vacation or Sick Leave)
Workplace Type
This is a hybrid position in Chicago,IL.
Application Deadline
This position will be accepting applications until Dec 17, 2024.

About TEKsystems:

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

About TEKsystems c/o Allegis Group