Cyber Vendor Assurance-Security Consultant II

TELUS Agriculture & Consumer Goods

11d

About The Position

TELUS Agriculture & Consumer Goods is a great place to work. You can see it in our team members. The diversity of the team and their unique contributions set us apart from the competition. Our success is based as much on our future friendly team as the innovative technology solutions we offer. Our team members include people like you – enthusiastic, innovative, passionate, and energetic. We believe that you'll find our high-performance culture personally fulfilling, professionally challenging and financially rewarding. Here’s the impact you will make and what we will accomplish together TELUS Agriculture & Consumer Goods is tackling one of the most pressing social challenges of our time – achieving more efficient production while lowering the impact on the environment. We believe that by delivering data insights and technology solutions that empower and connect producers to their consumers, we can improve the quality, safety and sustainability of our food and consumer goods globally. We offer an unmatched suite of innovative solutions and purpose-built applications for every participant in the supply chain, from ag input manufacturers and farmers through to consumer goods companies and their retail / foodservice channels. Our solutions enable our customers to optimize their businesses with more accuracy, efficiency and profit to create unified, trusted and sustainable food and consumer goods value chains. Today we serve the top Consumer Packaged Goods and Agriculture companies across the globe through our acquired and integrated best-in-class solutions, but we are still building awareness of our brand as TELUS in these industries Here’s the impact you will make and what we will accomplish together As a Cyber Vendor Assurance Security Consultant, you’ll be keeping TAC safe and protected by providing Cyber oversight across a diverse Global supplier portfolio. You will support all the key elements involved in the end-to-end Cyber Vendor Assurance program. The primary focus being to provide assurance regarding the confidentiality, integrity, and availability of the suppliers that we have entrusted our data /infrastructure with. For this to be achievable, it will involve working extensively with internal and external stakeholders. To allow for identification of vulnerabilities and areas of improvement to protect our brand, colleagues and customers, in turn helping to promote a collaborative security culture.

Requirements

CISM, CRISC, IS027001 LA, CISA
4 + years of applied and practical Cyber Vendor Assurance experience. Ability to demonstrate expertise and application of knowledge, in terms of technical and soft skills that are required in managing a diverse vendor assurance portfolio.
Strong understanding of Security frameworks (ISO 27001 / 27036) and ability to identify vulnerabilities / areas of control enhancement.
Adept at reviewing Vendor Security policies and standards to ensure appropriate scope and adequacy.
Clear understanding of information security principles including risk management, organization of Information Security, vulnerability identification, Data Loss Prevention, Supply chain associated risks etc.
Strong stakeholder management and interpersonal skills. Ability to engage and develop relationships across a broad range of geographies and sectors.
Strong organisational skills, with the ability to coordinate and effectively self-manage your own portfolio of work, independently to ensure high quality and timely delivery.
Pragmatic and balanced outlook relative to risk and impact with the ability to apply sound judgement.
Strong communication skills (verbal and written) with the ability to articulate non-conformities both written and verbally.
An adaptive communication style to reflect a diverse stakeholder audience across a global environment.
Strong analytical skills and attention to detail, coupled with capability to identify omissions, gaps and areas of focus.

Nice To Haves

Procurement knowledge, reflective of the Supplier lifecycle.
Operational Risk experience.

Responsibilities

Manage and own a diverse worldwide portfolio of vendor assessments, undertaking Information Security reviews using a defined methodology.
Assess responses to a defined set of Information Security controls, ensuring quality and completeness of returns.
Review and assess vendor responses. Identification of risk / vulnerabilities.
Propose supporting remediation activities relative to identified vulnerabilities.
Liaise with key stakeholders to ensure appropriate escalation and timely remediation.
Maintain and produce detailed reporting as well contributing towards key risk indicators and team management information.
Advise on risk articulation, materiality and required actions to remediate.
Collate and assess various Cyber intelligence sources to help provide greater insight as to the Vendors underlying Security posture.
Share knowledge and mentor colleagues, support queries and provide guidance in relation to Cyber Vendor Assurance.
Attend meetings, workshops, acting as delegate for Senior Manager when required.
Reinforce TAC's Customers First values in ensuring positive security outcomes for both external customers and internal stakeholders.
Contribute to the ongoing development of the Cyber Vendor Assurance team through constructive challenge, providing solutions, innovation and continual improvement.