Cybersecurity Risk Management Analyst

JOB DESCRIPTION:

Duties:

Either onsite in Maplewood, but flexible for Remote for the right candidate.

Candidate must work within CST/EST. Schedule is 8am EST to 4pm/5pm EST. MUST work within that schedule.

MUST be able to hit the ground running, make decisions.

ISRC resource to assist Third Party Cybersecurity Risk Management (TPCRM) team in conducting third party risk assessment and reassessments.

Description

• Years of experience: 8-10 years
• Duties/responsibilities: conduct TPCRM risk assessments and reassessments.
• Lead and coordinate the assigned TPCRM risk assessments and reassessments and the management of associated findings and remediation plans.
• As a member of the TPCRM team collaborating in partnership with third parties and business units, working to ensure control deficiencies are remediated by required deadlines.
• Education Preferred: Bachelors in Information Technologies or security certification (CISSP, CISM, CISA, or CRISC)
• Preferred: Degree plus security certifications
• Leader is open to candidates that do not have 4-year degree but must have a certificate and applicable/comparable experience in the industry.

Work location: remote, hybrid or in person

Minimal work direction needed, highly skilled and knowledgeable to the position and provides best practice sharing within work group.

Skills:

• Security certification (CISSP, CISM, CISA, or CRISC)
• OneTrust

Education:

• Education Preferred: Bachelor s in information technologies or security certification (CISSP, CISM, CISA, or CRISC)
• Preferred: Degree plus security certifications
• Leader is open to candidates that do not have 4-year degree but must have a certificate and applicable/comparable experience in the industry.