Usamos cookies técnicas y estadísticas de visitas: Yandex Metrica y el registro de visitas desidentificado de Zorky. Nunca vendemos datos. Más sobre cookies y estadísticas.
Zorky está en modo de prueba: todo es gratis. Este sitio es solo una demo: los nombres de empresas, los enlaces y tu feed personal se abren tras registrarte. Regístrate →
ZorkyZorky
Español
@termdocs
← Todos los empleos

IT Security Risk Specialist (Third-Party)

Middlehybrid~$7.5K /moWarszawa, PL →hace 1 sem.
Análisis del mercado
📊 Security: salarios y demanda en el mercado
Stack
Information SecurityTechnical RiskSecurity EngineeringSecurity ArchitectureTPRMCloudIAMData protectionSecurity assessmentsAIcloudservicenow
Mostrar empresa y enlace
Gratis, tras iniciar sesión.
Postular
Sube tu CV: empleadores y reclutadores de distintos países que buscan tu perfil podrán contactarte directamente.
Enviar tu CV →
Descripción
About the Project & Role We are representing a top-tier, global financial institution that heavily invests in modern technology, cloud-native solutions, and advanced Artificial Intelligence to drive its business decisions. Currently, the company is expanding its structures in Poland and is looking for the first person in the Warsaw office to join a 9-person, global Technology Governance and Risk Management team (reporting directly to the Head of the team, rolling up to the CISO). We are looking for a highly technical Subject Matter Expert (SME) who will take the wheel in the area of third-party security risk management. This is not a compliance role focused on clicking through Excel spreadsheets. You will be technically x-raying architectures, analyzing penetration test results, and verifying whether cloud solutions and AI tools provided by external vendors are secure enough for a multi-billion-dollar business. What you will do (Responsibilities) Technical Assessments: Perform in-depth, hands-on security assessments of new and existing third parties, with a strong focus on Cloud and SaaS environments. Architecture & Evidence Review: Analyze data flows, system integrations, assurance reports (SOC 2, ISO 27001), penetration test results, and vulnerability scans. Security Control Evaluation: Assess a wide spectrum of domains, including IAM, Network Security, Vulnerability Management, Data Protection, and AppSec. Challenging & Validating: Engage directly with external vendors' en
Descripción completa, empresa y enlace para postular: después de iniciar sesión. Iniciar sesión
Los contactos del empleador (correo/teléfono/telegram) están ocultos en la vista previa pública. Envía tu CV para que los empleadores puedan contactarte directamente.
¿Pregunta urgente? Escribe a @termdocs