Third Party Information Security Analyst
About The Position
The Third Party Information Security Analyst supports the Bank’s Third Party Risk Management function by assessing and monitoring information security risks associated with third, fourth, and other nth parties. The role assists with vendor due diligence, security reviews, information security risk assessments, and ongoing monitoring to ensure third-party relationships align with the organization’s security requirements. The position is part of Information Risk Governance, which oversees information and cybersecurity risk and maintains and improves a branch-wide framework aligned with Head Office and regulatory requirements. The role is located in New York City and requires a hybrid schedule with at least two days per week in the office. It is for Officer-level candidates.
Requirements
- At least 3 years of experience with risk assessment methodologies and techniques and the Third Party Risk Management lifecycle.
- Experience working with a Third Party Risk Management platform, such as Prevalent.
- Experience working with and assessing information security documentation such as SOC 2 reports and ISO 27001 certifications.
- Strong knowledge of information security and risk management frameworks, including the NIST Cybersecurity Framework, ISO/IEC 27001, and the Cyber Risk Institute Profile.
- Strong Microsoft Office skills.
- Strong verbal and written communication skills.
- Strong analytical skills.
- Self-motivated with good time management skills.
Nice To Haves
- Prior experience with financial industry structure and concepts.
Responsibilities
- Conduct initial and continuous information security risk assessments of third and nth parties.
- Review third-party security documentation, including SOC reports, ISO 27001 certifications, security questionnaires, and business continuity and disaster recovery documentation.
- Document assessment findings and risk ratings in the Bank’s TPRM platform, and maintain a tracking sheet showing assessment status, due dates, completion, and follow-up actions.
- Coordinate vendor onboarding and offboarding with relevant teams, including Administration and Legal, with a focus on information security risks.
- Monitor information security-related incidents involving third parties, coordinate requests for information from third parties with relevant stakeholders, and support assessments of potential impact to the Bank.
- Participate in internal audits and external examinations related to information security risk domains of third-party risk management.
- Assist in maintaining information security-related TPRM policies and procedures.
- Perform other duties and responsibilities as assigned by management.
Benefits
- Paid time off
- Medical benefits
- Health Savings Account (HSA)
- Vision insurance
- Dental insurance
- Flexible Spending Account (FSA)
- 401(k)
- Profit sharing
- Legal plan
- Cancer indemnity plan
- Disability insurance
- Life insurance
- Employee Assistance Program
- Commuter benefits
- Business travel accident coverage
- Paid volunteer day
- Paid memberships
- Paid seminars
- Tuition assistance
- Socialization opportunities for wellness and financial wellbeing, runs and walks, team building, happy hours, and activities supporting the Sustainable Development Goals
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
