onsite
Third-Party Information Security Assessor - citi
Software Engineer
Seeking a Third-Party Information Security Assessor to evaluate and manage risks associated with external vendors. This role involves conducting security assessments and ensuring compliance with industry standards.
About the role
Key Responsibilities
- Conduct comprehensive security assessments of third-party vendors and partners.
- Identify and analyze potential security risks and vulnerabilities in vendor systems and processes.
- Develop and implement risk mitigation strategies for third-party relationships.
- Ensure vendor compliance with internal security policies, industry regulations, and contractual obligations.
- Collaborate with internal teams and external stakeholders to address security concerns.
- Prepare detailed reports on assessment findings and recommendations.
Requirements
- Proven experience in information security, risk assessment, and third-party risk management.
- Strong understanding of security frameworks, compliance standards (e.g., ISO 27001, SOC 2), and best practices.
- Experience with security audits and vulnerability assessments.
- Excellent analytical, problem-solving, and communication skills.
- Ability to manage multiple assessments and projects simultaneously.
Skills
information securityrisk assessmentsecurity auditscompliancevulnerability management