Strategic Third-Party Cyber Risk Analyst

ALOIS Solutions; Województwo małopolskie; Vor Ort; PLN 180.000 - 280.000; Vollzeit

Zusammenfassung

ALOIS Solutions is seeking an experienced Cybersecurity Risk Assessor to evaluate third-party vendors and their security postures. You will perform risk assessments, identify threats, and propose mitigation strategies, while ensuring compliance with policies, standards, and regulatory requirements.

You will work within the CISO/OCRA team in Poland, coordinating with Risk Taxonomy Owners, Compliance, and Outsourcing/Supplier Management to improve the risk assessment process and remediation

Qualifikationen

• Knowledge of regulatory guidelines and requirements (e.g., FRBNY, FINMA, MAS, HKMA, DORA)
• Experience in 3rd to Nth party security risk oversight and assessment
• Ability to engage with internal/external regulators and stakeholders
• Information security or data privacy certifications are advantageous
• Strong communication, negotiation and analytical skills desired
• Familiarity with NIST, COBIT, ITIL, ISO frameworks
• Experience with IT security controls in complex environments including cloud

Aufgaben

• Conduct risk assessments of third-party vendors to identify threats and vulnerabilities
• Report updates to committees and management on 3rd party risk and compliance
• Ensure risk assurance approaches align with policies, standards and regulatory requirements
• Analyze vendor security controls and compliance with regulatory standards
• Develop and implement risk mitigation strategies to reduce exposure
• Communicate findings and recommendations to senior management and legal/compliance
• Monitor vendor compliance through periodic assessment activities
• Collaborate with cross-functional teams in Poland within the CISO/OCRA team

Kenntnisse

3rd party risk oversight

Regulatory frameworks

NIST CSF / ISO27001 knowledge

Communication with executives

Risk assessment methodologies

Analytical decision making

Ausbildung

Bachelor's in IT / CS / related

Cybersecurity certifications (CISSP/CISM/CISA/CRISC)

Tools

NIST CSF

ISO27001

PCI DSS

Jobbeschreibung

ALOIS Solutions is seeking an experienced Cybersecurity Risk Assessor to evaluate third-party vendors and their security postures. You will perform risk assessments, identify threats, and propose mitigation strategies, while ensuring compliance with policies, standards, and regulatory requirements.

You will work within the CISO/OCRA team in Poland, coordinating with Risk Taxonomy Owners, Compliance, and Outsourcing/Supplier Management to improve the risk assessment process and remediation