Job Description: Third Party Cyber and Information Security - Remediation Your role: You will be responsible for evaluating the remediation of Cyber Security control gaps relating to deficiencies identified as part of a CIS risk assessment where third-party vendors that have access to sensitive information or systems of client. You will conduct reviews of evidence shared as part of Risk Treatment Plan closure to identify and evaluate if potential security threats posed by third-party vendors are appropriately remediated in line with client’s cybersecurity policies and procedures. We are looking for candidates who have experience in the following areas: · business risk management, or regulatory and audit issue experience in NFRI/operational risk issues closure, in line with standard procedures.
· exposure to cyber tech risk assessments of third-party vendors to identify potential security threats and vulnerabilities outcome. · analyze and evaluate vendor security controls, policies, and procedures to ensure compliance with regulatory requirements and industry best practices. · develop and implement risk mitigation strategies to address identified vulnerabilities and reduce the organization's exposure to cyber threats.
· communicate assessment findings and recommendations (including control requirements) to internal stakeholders, including senior management, legal, and compliance teams. · monitor and track vendor compliance with security policies and procedures through ongoing