Third Party Cyber Risk Analyst - Manager
Core
Assess, verify, and report on the effectiveness of third-party corporate information security programs using State Street's risk management framework.
Role type
Manager, Third-Party Cyber Risk Analyst
Builds
Third-party cyber security assessments and risk mitigation reports
Domain
Financial Services / Cyber Security / Third-Party Risk Management
Required skills
Cyber/information security assessment, Security and risk management frameworks (ISO 27001/27002, NIST, FRB/OCC, FFIEC, GDPR, DORA), Technical and risk management reporting, Issue management
Preferred skills
CISA, CISM, CISSP, SECURITY+ certifications, Critical thinking and analytical skills
Technologies
SOC2, SIG, NIST, ISO 27001/2
Responsibilities
Perform cyber/information security assessments of third-party service providers, Review and analyze third-party attestation and certification artifacts, Document assessment results consistent with TPCRM standards, Provide subject matter expertise and recommendations
Seniority
Manager, 10+ years experience
