Third-Party Cyber Risk Consultant (FTC)
Core
Conducting ongoing third-party cyber assessments, risk scoring, and remediation planning to align supplier security with RSA's risk appetite.
Role type
Third-Party Cyber Risk Consultant (FTC)
Builds
Third-party risk management function for RSA's Commercial Lines business
Domain
Insurance / Cybersecurity / Third-Party Risk Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Third-party security risk assessments, due diligence, risk scoring, remediation planning, online questionnaires, spreadsheets, NIST CSF, ISO 27001, SOC 2, GDPR compliance, Hellios, Bitsight, OneTrust, O365, automated TPRM platforms
Preferred skills
Influencing others, building effective relationships, interfacing with security/technology/business communities, technical security and risk management challenges
Technologies
Hellios, Bitsight, OneTrust, O365, automated third-party risk management (TPRM) platforms
Responsibilities
Completing ongoing third-party cyber assessments based on supplier risk ratings, ensuring assessments align with security policies and risk appetite, identifying and managing risks throughout the supplier lifecycle, supporting audits and control validations, maintaining a register of third-party risks and tracking remediation, producing reports and management information on third-party cyber risk posture
Seniority
Mid-Senior, hands-on IC
