Senior Vendor Cyber Risk Analyst

Description:

• Bachelor’s degree in Computer Science or engineering or equivalent
• Experience: Minimum 8 years of experience in Information Technology or Risk Management, out of which a minimum of 4 years with Information Security or Technology Risk Management
• Experience with Information Security and/or Technology Risk Management, servicing US-based large financial services companies
• Ability to assess controls with respect to cloud applications as well as organization-wide controls
• Demonstrable understanding of the concepts of technology controls and information security controls
• Strong communication skills are a must. The resource should be able to effectively communicate with cross-functional teams and external vendors, both written and oral communication is critical
• The candidate is required to act as a “Go to” person for rest of the team.
• The candidate is also expected to perform complex risk assessments of cloud service providers.
• Ability to come up with risk metrics, to enhance our existing procedures is highly desired.
• This position is required to work in UK Shift; flexibility is a must, especially when it comes to vendor and internal meetings held during US business hours
• Exposure to cloud technologies and cloud security is highly desired; the familiarity with pubic cloud technologies such as Amazon Web Services (AWS) or Microsoft Azure or Google Cloud is highly preferred
• Any prior exposure to vendor risk management is a plus

Preferred Qualifications

• Certifications: Information Security and risk management certification (e.g. ISACA/CRISC, SANS/GIAC, ISC2 CISSP, ISACA/CISA) is desirable but not a must
• Project management skills are nice to have as the activities involve coordination with internal stakeholders and the vendors