Cybersecurity & Technology Risk Engineer
Job Description
Key Responsibilities
- Conduct third-party and outsourcing risk assessments
- Review vendor security controls, policies, certifications and audit reports
- Assess information security, technology, cloud and compliance risks
- Identify control gaps and recommend remediation actions
- Prepare risk assessment reports and document findings
- Work closely with business, technology, security, compliance and vendor stakeholders
- 5+ years in Technology Risk, Cybersecurity, IT Audit, Information Security or Vendor Risk Management
- Strong experience in Third-Party Risk Management (TPRM) and vendor due diligence
- Good knowledge of cybersecurity controls, cloud security and outsourcing risk
- Familiarity with MAS Technology Risk Management (TRM) and Outsourcing Guidelines is preferred
- Strong analytical, report-writing and stakeholder management skills
- Certifications such as CISSP, CISA, CRISC, CISM or ISO 27001 are advantageous
- Banking, financial services, fintech or other regulated industry experience is highly desirable
More Info
Job Type:
Industry:
Employment Type:
Key Skills
Outsourcing Guidelines
Outsourcing risk
Cybersecurity controls
Vendor due diligence
About Company
Skills:
MAS Technology Risk Management (TRM) Guidelines, Cloud Security, Cybersecurity, Information Security, Iso 27001, Cism, It Audit, Security Assessments, Technology Outsourcing Risk, Third-Party Risk Management, MAS Outsourcing Guidelines, Cisa, Vendor Due Diligence, Cybersecurity Controls, Vendor Third-Party Risk Management, Cissp, CRISC, Technology Risk Management
Skills:
technology risk , cloud security, Cybersecurity, Information Security, Iso 27001, Cism, It Audit, vendor due diligence processes, Outsourcing Guidelines, Vendor Risk Management, MAS Technology Risk Management TRM, outsourcing risk management, Cisa, third-party risk management, cybersecurity controls, Cissp, CRISC
Skills:
MAS Technology Risk Management (TRM), technology risk , Cloud security, Cybersecurity, Information Security, Iso 27001, Cism, It Audit, Outsourcing risk management, Outsourcing Guidelines, Vendor Risk Management, Cisa, Third-party risk management, Cybersecurity controls, Vendor due diligence, Cissp, CRISC
Skills:
MAS Technology Risk Management (TRM), cloud security, Iso 27001, Cism, outsourcing risk management, Cisa, third-party risk management, cybersecurity controls, Cissp, outsourcing guidelines, vendor due diligence, CRISC
Skills:
Cloud security, Cybersecurity, Information Security, Iso 27001, Cism, It Audit, Outsourcing risk management, Outsourcing Guidelines, Vendor Risk Management, MAS Technology Risk Management TRM, Cisa, Third-party risk management, Cybersecurity controls, Vendor due diligence, Cissp, CRISC, Technology Risk Management