Vendor Due Diligence Specialist

Point72 Asset Management, L.P; Warszawa; On-site; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Sports card

Private life insurance

Medical and dental care

Vision allowance

Private pension

Volunteer opportunities

Affinity groups support

Travel accident insurance

Employee assistance program

Educational assistance

Job summary

Point72 Asset Management, L.P. in Warsaw, Poland, seeks an experienced information security professional to join its Technology team and strengthen third-party risk assessments across cloud and SaaS environments.

The role requires five or more years in information security or risk management, a related Bachelor's degree, and strong communication of complex findings to stakeholders. Competitive benefits and a collaborative culture are offered.

Qualifications

• Five+ years in information security, technology risk, or third-party risk management.
• Experience performing technical security assessments of third-party environments.
• Bachelor's degree in information security, information systems, information technology, or related field.
• Strong understanding of cloud and SaaS environments, IAM, network security, vulnerability management, and data protection.
• Familiarity with logging, incident response, and application security in complex environments.
• Knowledge of NIST CSF, NIST 800-53, ISO 27001, and SOC 2 security standards.

Responsibilities

• Serve as a technical SME within the third-party information security risk program.
• Perform in-depth security assessments of third parties that access, process, store, or transmit firm information.
• Evaluate design and effectiveness of third-party security controls across technical environments.
• Analyze business use cases, data flows, system integrations, and architectures to establish risk context.
• Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and docs.
• Assess controls across identity, cloud, infrastructure security, network security, vulnerability management, and data protection.
• Engage third parties and internal stakeholders to validate responses, investigate gaps, and evaluate remediation plans.
• Produce concise, risk-based assessment reports explaining materiality, risk, and next steps.
• Partner with Technology, Compliance, Legal, and Procurement to support consistent risk processes.
• Improve assessment methodologies, templates, and metrics while staying current on threats.

Skills

Information security

Security risk management

Security architecture

Security engineering

Cloud security

Threat assessment

Education

Bachelor's degree in information security

Tools

NIST CSF

NIST 800-53

ISO 27001

SOC 2

Job description

A Career with Point72's Technology Team

As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm's IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We're a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.

As a member of Point72's Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity while delivering real business impact for our multi-billion-dollar global business.

What you'll do

WHAT YOU'LL DO

• Serve as a technical subject matter expert within our firm's third-party information security risk management program
• Perform in-depth security assessments of new and existing third parties that access, process, store, or transmit firm information
• Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models
• Analyze business use cases, data flows, system integrations, and technical architectures to establish appropriate risk context
• Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and architecture documentation
• Assess controls across identity, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response, and application security
• Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediation plans
• Produce concise, risk-based assessment reports that explain issue materiality, actual risk, and recommended next steps
• Partner with Technology, Compliance, Legal, Procurement, and other stakeholders to support a consistent third-party risk management process
• Improve assessment methodologies, processes, templates, and metrics while staying current on emerging threats and security practices

What's required

• Five or more years of experience in information security, technology risk, security engineering, security architecture, or third-party risk management
• Experience performing technical security assessments of third-party environments, including evaluating control design, effectiveness, and risk impact
• Bachelor's degree in information security, information systems, information technology, or a related field
• Strong technical understanding of cloud and software-as-a-service environments, identity and access management, network security, vulnerability management, and data protection
• Understanding of logging and monitoring, incident response, application security, and technical control evaluation across complex environments
• Familiarity with industry-recognized security frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001, and SOC 2
• Ability to analyze technical evidence, challenge third-party assertions, and reach independent conclusions about control effectiveness and security risk
• Strong analytical judgment and communication skills, with the ability to explain technical security issues to technical and nontechnical stakeholders
• Ability to work independently, manage multiple assessments, and collaborate effectively across teams
• Commitment to the highest ethical standards

We take care of our people

We invest in our people, their careers, their health, and their well-being. When you work here, we provide:

• Sports card
• Private life insurance
• Private medical and dental care, with vision allowance
• Private pension scheme
• Volunteer opportunities
• Support for employee-led affinity groups representing women, people of color and the LGBT+ community
• Business travel accident insurance
• Employee assistance program
• Educational assistance reimbursement

About Point72

Point72 Asset Management is a global firm led by Steven Cohen that invests in multiple asset classes and strategies worldwide. Resting on more than a quarter-century of investing experience, we seek to be the industry's premier asset manager through delivering superior risk-adjusted returns, adhering to the highest ethical standards, and offering the greatest opportunities to the industry's brightest talent. We're inventing the future of finance by revolutionizing how we develop our people and how we use data to shape our thinking. For more information, visit www.Point72.com/working-here