Third Party Cyber Risk Analyst - Manager

Overview

Third Party Risk Analyst (Officer) on State Street's Third-Party Cyber Security Assessments team, assessing the information security safeguards of third-party service providers.

What you'll do

• Thoroughly perform cyber/information security assessments of third-party service providers' enterprise using State Street's risk management framework and cybersecurity assessment methods for vendors of varying sizes and complexities.
• Review and analyze third-party attestation and certification artifacts (SOC2, SIG, NIST, ISO 27001/2 certifications, etc.) to identify information security risks.
• Document assessment results consistent with State Street's TPCRM, Issue Management and Enterprise Risk Management standards.
• Provide subject matter expertise in the third-party information security program and provide timely recommendations to identified problems.

What you'll need

• 10 years of experience working in Cyber/Information Security, Third Party Cyber/Information Security Assessment or Cyber Security Assessments.
• Knowledge of security and risk management frameworks and regulations such as ISO 27001/27002, NIST, FRB/OCC Third Party Risk Management Guidelines, FFIEC Security Handbook, GDPR, DORA, etc.
• Superior attention to detail with excellent written and verbal communication and presentation skills.
• Expertise in writing technical and risk management reports.

Nice to have

• Bachelor's and/or Master's degree in Cybersecurity, Law, Privacy, Enterprise or Operational Risk Management.
• CISA, CISM, CISSP, Security+ or equivalent.
• Demonstrated critical thinking and analytical skills.
• Ability to unwind complex cyber/information security issues for a variety of technical and non-technical audiences.
• Strong understanding of information security domains and a well-rounded security and risk management background.

Details

• Location: Bangalore, India.
• Work mode: strictly onsite.