Vendor Due Diligence & Security Risk Specialist

Point72 Asset Management, L.P; Warszawa; On-site; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Sports card

Private life insurance

Medical and dental care

Vision allowance

Private pension

Volunteer opportunities

Affinity groups support

Travel accident insurance

Employee assistance program

Educational assistance

Job summary

Point72 Asset Management, L.P. in Warsaw, Poland, seeks an experienced information security professional to join its Technology team and strengthen third-party risk assessments across cloud and SaaS environments.

The role requires five or more years in information security or risk management, a related Bachelor's degree, and strong communication of complex findings to stakeholders. Competitive benefits and a collaborative culture are offered.

Qualifications

• Five+ years in information security, technology risk, or third-party risk management.
• Experience performing technical security assessments of third-party environments.
• Bachelor's degree in information security, information systems, information technology, or related field.
• Strong understanding of cloud and SaaS environments, IAM, network security, vulnerability management, and data protection.
• Familiarity with logging, incident response, and application security in complex environments.
• Knowledge of NIST CSF, NIST 800-53, ISO 27001, and SOC 2 security standards.

Responsibilities

• Serve as a technical SME within the third-party information security risk program.
• Perform in-depth security assessments of third parties that access, process, store, or transmit firm information.
• Evaluate design and effectiveness of third-party security controls across technical environments.
• Analyze business use cases, data flows, system integrations, and architectures to establish risk context.
• Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and docs.
• Assess controls across identity, cloud, infrastructure security, network security, vulnerability management, and data protection.
• Engage third parties and internal stakeholders to validate responses, investigate gaps, and evaluate remediation plans.
• Produce concise, risk-based assessment reports explaining materiality, risk, and next steps.
• Partner with Technology, Compliance, Legal, and Procurement to support consistent risk processes.
• Improve assessment methodologies, templates, and metrics while staying current on threats.

Skills

Information security

Security risk management

Security architecture

Security engineering

Cloud security

Threat assessment

Education

Bachelor's degree in information security

Tools

NIST CSF

NIST 800-53

ISO 27001

SOC 2

Job description

Point72 Asset Management, L.P. in Warsaw, Poland, seeks an experienced information security professional to join its Technology team and strengthen third-party risk assessments across cloud and SaaS environments.

The role requires five or more years in information security or risk management, a related Bachelor's degree, and strong communication of complex findings to stakeholders. Competitive benefits and a collaborative culture are offered.