About this role

Develop, maintain, and communicate third party information security requirements
Drive strategic initiatives focused on the design of Third Party Cyber Assurance (TPCA) program requirements
Interaction with technical subject matter experts, GIS Policy team, and third party management community
Review and adopt industry best practices to transform processes for third party information security requirements

At least 5 years of relevant experience
Previous information technology/security audit/assessment experience
Excellent verbal and written communication skills
Self-starting, organized, and requiring minimal management oversight
Ability to operate across organizational boundaries to accomplish tasks
Strong analytical skills/problem solving/conceptual thinking/attention to detail
Ability to work effectively with peers and various levels of management
Well organized and thorough, with the ability to balance and prioritize
Background in information security, data protection and risk management
Familiarly or experience with information security industry frameworks (e.g., NIST, CMMC, ISO 27001, PCI, etc.)
Deep understanding of risk management concepts
Cross functional project management and process development experience

Cyber Security Analyst – Third Party Governance and Planning

Key skills