Third Party Cyber Risk Analyst

Job Description

{"title":"Third Party Cyber Risk Analyst","company_name":"Selby Jennings","location":"New York, NY","via":"Selby Jennings","job_highlights":[{"title":"Qualifications","items":["Working knowledge of the third-party risk management lifecycle","Familiarity with industry frameworks and standards such as NIST, ISO 27001, CRI Profile, or similar control frameworks","Experience reviewing independent assurance reports including SOC 1 and SOC 2 examinations","Understanding of information security principles including access management, business continuity, incident response, data protection, and cybersecurity governance","Familiarity with vendor risk management platforms and workflow tools","Strong analytical, organizational, and communication skills","Prior experience within banking, financial services, fintech, or other regulated industries is advantageous"]},{"title":"Responsibilities","items":["Third-Party Cyber Risk AnalystA global financial services organization is seeking an Information Security & Third-Party Risk Analyst to support the oversight of vendor and external partner risk","This individual will play a key role in evaluating the cybersecurity posture of suppliers, service providers, and other external organizations that support business operations","The successful candidate will partner with stakeholders across risk, technology, legal, compliance, and procurement teams to ensure third-party relationships meet established security standards and regulatory expectations","Key ResponsibilitiesEvaluate cybersecurity and technology risks associated with new and existing third-party relationships","Analyze security artifacts such as SOC reports, independent audit reports, business continuity plans, information security policies, penetration testing results, and certification documentation","Identify control gaps, document findings, and assign risk ratings based on established assessment methodologies","Support vendor onboarding, contract reviews, renewals, and termination activities from a security risk perspective","Monitor ongoing third-party cybersecurity developments, incidents, and emerging risks that could affect the organization","Maintain accurate records within third-party risk management systems and ensure timely completion of risk reviews","Collaborate with internal stakeholders to track remediation efforts and risk mitigation activities","Assist with regulatory examinations, audit requests, and governance initiatives related to third-party risk oversight","Contribute to the enhancement of risk management procedures, standards, and operating practices"]}],"share_link":"https://www.google.com/search?ibp=htl;jobs&q=Cyber+Risk&htidocid=xb4NTmSPKSZmTsvKAAAAAA%3D%3D&hl=en-US&shem=epsd1,rimspwouoe&shndl=37&shmd=H4sIAAAAAAAA_xXEsQrCMBAAUFz7CQ5ys2gjQhedxEHoUERdOpWkHklsvAu5gM1_-MHiG171XVTNw_n0hKtOucC5GExw8zLBiXQokmELLRsQ1Gl0wAQXZhtweXQ5RzkoJRJqK1lnP9YjvxUTGp7Vi438G8TphDHojMO-2c11JLte3TGYAi0SebICnqDDD_Scpg10_Q_CaTOBlwAAAA&shmds=v1_ARwrE22_2QW00CQ7uriK1qGu7gFQMW9nbPy2ZQlXZztLDaFipQ&source=sh/x/job/li/m1/1#fpstate=tldetail&htivrt=jobs&htiq=Cyber+Risk&htidocid=xb4NTmSPKSZmTsvKAAAAAA%3D%3D","thumbnail":"https://serpapi.com/searches/6aac8067a3882d5d8351b614/images/SyWHFXZ1V3ithNsX9eGPvDqy6fU-9o3p4aLO2_9YRz8.png","extensions":["6 days ago","90K–130K a year","Full-time","No degree mentioned"],"detected_extensions":{"posted_at":"6 days ago","salary":"90K–130K a year","schedule_type":"Full-time","qualifications":"No degree mentioned"},"source_link":"https://www.selbyjennings.com/en-fr/job/third-party-cyber-risk-analyst-pr609511_1789141937","job_title":"Third Party Cyber Risk Analyst","description":"Third-Party Cyber Risk AnalystA global financial services organization is seeking an Information Security & Third-Party Risk Analyst to support the oversight of vendor and external partner risk. This individual will play a key role in evaluating the cybersecurity posture of suppliers, service providers, and other external organizations that support business operations.The successful candidate will partner with stakeholders across risk, technology, legal, compliance, and procurement teams to ensure third-party relationships meet established security standards and regulatory expectations.Key ResponsibilitiesEvaluate cybersecurity and technology risks associated with new and existing third-party relationships.Analyze security artifacts such as SOC reports, independent audit reports, business continuity plans, information security policies, penetration testing results, and certification documentation.Identify control gaps, document findings, and assign risk ratings based on established assessment methodologies.Support vendor onboarding, contract reviews, renewals, and termination activities from a security risk perspective.Monitor ongoing third-party cybersecurity developments, incidents, and emerging risks that could affect the organization.Maintain accurate records within third-party risk management systems and ensure timely completion of risk reviews.Collaborate with internal stakeholders to track remediation efforts and risk mitigation activities.Assist with regulatory examinations, audit requests, and governance initiatives related to third-party risk oversight.Contribute to the enhancement of risk management procedures, standards, and operating practices.Desired BackgroundExperience conducting technology, cybersecurity, or vendor risk assessments.Working knowledge of the third-party risk management lifecycle.Familiarity with industry frameworks and standards such as NIST, ISO 27001, CRI Profile, or similar control frameworks.Experience reviewing independent assurance reports including SOC 1 and SOC 2 examinations.Understanding of information security principles including access management, business continuity, incident response, data protection, and cybersecurity governance.Familiarity with vendor risk management platforms and workflow tools.Strong analytical, organizational, and communication skills.Prior experience within banking, financial services, fintech, or other regulated industries is advantageous.","apply_options":[{"title":"Selby Jennings","link":"https://www.selbyjennings.com/en-fr/job/third-party-cyber-risk-analyst-pr609511_1789141937?utm_campaign=google_jobs_apply&utm_source=google_jobs_apply&utm_medium=organic"},{"title":"LinkedIn","link":"https://www.linkedin.com/jobs/view/third-party-cyber-risk-analyst-at-selby-jennings-4466313820?utm_campaign=google_jobs_apply&utm_source=google_jobs_apply&utm_medium=organic"},{"title":"Bandana.com","link":"https://bandana.com/jobs/15f9e939-fa0e-4f57-b0da-1bf557e79af1?utm_campaign=google_jobs_apply&utm_source=google_jobs_apply&utm_medium=organic"},{"title":"Jooble","link":"https://jooble.org/jdp/226764022587731095?utm_campaign=google_jobs_apply&utm_source=google_jobs_apply&utm_medium=organic"},{"title":"BeBee","link":"https://bebee.com/us/jobs/third-party-risk-analyst-saxon-global-new-york--lifeworq-c3e6d850-1d67-49a2-8401-7489b20213c4?utm_campaign=google_jobs_apply&utm_source=google_jobs_apply&utm_medium=organic"},{"title":"Talents By Vaia","link":"https://talents.vaia.com/companies/achilleion/third-party-risk-analyst-50000217/?utm_campaign=google_jobs_apply&utm_source=google_jobs_apply&utm_medium=organic"},{"title":"WhatJobs","link":"https://www.whatjobs.com/jobs/third-party-risk-analyst/new-york-new-york?id=3060227061&utm_campaign=google_jobs_apply&utm_source=google_jobs_apply&utm_medium=organic"},{"title":"Jobilize","link":"https://www.jobilize.com/job/us-ny-new-york-third-party-risk-analyst-advisory-jack-henry-hiring?utm_campaign=google_jobs_apply&utm_source=google_jobs_apply&utm_medium=organic"}],"job_id":"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"}