Security Risk Management Consultant

Responsibility:

The selected consultants will be responsible for:

• Conducting Third-Party Risk Management (TPRM) and Vendor Risk Assessments.
• Performing Vendor Due Diligence reviews and security assessments.
• Conducting security control reviews and control gap assessments.
• Assessing technology, cybersecurity, and information security risks associated with third parties.
• Reviewing cloud security controls and cybersecurity compliance requirements.
• Supporting outsourcing risk management and governance activities.
• Preparing risk assessment reports, findings, and remediation recommendations.
• Engaging stakeholders and presenting assessment outcomes.
• Supporting compliance with MAS Technology Risk Management expectations and banking regulatory requirements.

Key Skills Required

• Third-Party Risk Management (TPRM)
• Vendor Risk Management and Due Diligence
• Security Assessments and Control Gap Assessments
• Technology Risk, Information Security, or Cybersecurity
• Cloud Security and Cybersecurity Controls
• Strong Analytical, Documentation, and Stakeholder Management Skills
• Familiarity with MAS Technology Risk requirements is preferred