Security Specialist – Third Party Risk Assessment
Are you ready to lead critical cybersecurity initiatives and make a lasting impact in the financial industry? Apply Now!
Working with one of our top financial clients, this role calls for a Security Specialist – Third Party Risk Assessment and offers an exciting opportunity to manage third-party cyber risk assessments for global suppliers. The position involves providing expert guidance on security risks, developing mitigation strategies, and supporting enterprise-wide security initiatives. This is a dynamic role suitable for an experienced security professional eager to contribute in a collaborative environment, with opportunities for long-term growth and skill development.
Responsibilities
- Lead or participate in third-party cyber risk assessments across various suppliers and risk levels, ensuring alignment with internal policies and industry standards.
- Coordinate with risk stakeholders to initiate, scope, plan, and execute assessments, providing clear and comprehensive reports on findings.
- Communicate assessment results effectively to internal teams and external partners, ensuring clarity and understanding of risks and mitigation actions.
- Collaborate with risk owners to develop and validate risk mitigation and remediation plans, ensuring timely and effective implementation.
- Contribute to the development of global cybersecurity strategies and frameworks for third-party risk management.
- Guide and advise partners on technology controls, security policies, standards, and incident management.
- Ensure compliance with regulatory requirements and internal standards throughout assessment processes.
- Support process improvement initiatives to enhance efficiency and effectiveness of cybersecurity activities.
- Promote a strong security culture by influencing behavior and fostering risk-awareness across teams.
Desired Skill-Set
- Over 10 years of experience in third-party cyber risk assessment or similar security roles.
- Deep expertise in IT security disciplines, risk management practices, and relevant frameworks.
- Proven ability to lead complex security projects and provide guidance on technology controls and security policies.
- Strong verbal and written communication skills, capable of engaging technical and non-technical audiences.
- Excellent collaboration and coordination skills with internal teams and external vendors.
Nice to Have
- CISSP or similar recognized cybersecurity certification.
- Prior experience working within the banking or financial services industry.
- Demonstrated track record of managing large-scale security initiatives and stakeholder engagement.
BeachHead is an equal opportunity agency and employer. We advocate for you and welcome anyone regardless of race, color, religion, national origin, sex, physical or mental disability, or age.
Privacy Policy