Third Party Security Consultant

Third Party Security Consultant

Requirements

• Third party risk management
• Cyber and Information Security
• Auditing with experience of frameworks such as ISO27001

Responsibilities

• Execution of risk assessments and security audits of third-party providers to assess their security posture, compliance with regulatory requirements and incident history, and communicate key findings to the relevant stakeholders.
• Identification of emerging security threats, attack techniques and third party vendor security best practice by collaborating at industry events and training programmes to share knowledge and expertise.
• Management of vendor onboarding/offboarding processes, including security and technology assessments, contractual negotiation procedures and risk mitigation measures, considering security policies, technical controls and procurement.
• Coordinate with third-party vendors to foster collaboration, promote security best practice, address security incidents and share incident information.

Preferred Qualifications

• Presentation skills using tools such as PowerPoint
• Stakeholder management and being able to converse across all levels within the bank
• Data analysis and being able to analyze complex data