Principal Associate, Cyber Security
Core
Partner with internal and external stakeholders to conduct cyber-focused risk assessments of third parties, evaluating their security environments and delivering quality assessment reports to protect sensitive information and assets.
Role type
Senior IC third-party risk and cybersecurity analyst
Builds
Third-party security assessment reports and due diligence frameworks
Domain
Financial services / Cybersecurity / Third-party risk management
Deliverable
dashboards & analysis
Required skills
Third-party risk assessment, cybersecurity frameworks (NIST CSF, MITRE ATT&CK, CMMC, FedRAMP), security control analysis, executive reporting, stakeholder management, industry trend analysis, risk mitigation strategy, security incident analysis, multi-cloud environment knowledge, security tool usage (Splunk, Crowdstrike, Qualys, AWS Security Hub), cybersecurity metrics interpretation
Preferred skills
PCI DSS, NIST, ISO, SOC 2 compliance, financial governance processes
Technologies
Splunk, Crowdstrike, Qualys, AWS Security Hub
Responsibilities
Support kick-off, planning, and scoping of cyber risk assessments; analyze third-party control data against security expectations; review and support execution of assessment reports including executive summaries; maintain relationships with third-party management to manage expectations and remediation; work autonomously to identify insights and drive actions; stay current with industry trends to support program development; travel 30-40% for multi-day off-site assessments
Seniority
Senior, hands-on IC
