Vendor Security & Third-Party Risk Specialist

Point72; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Sports card

Private medical and dental care

Volunteer opportunities

Support for employee-led affinity & DE

Employee assistance program

Educational assistance reimbursement

Job summary

Point72 is seeking a seasoned security professional to lead third-party risk management and conduct in-depth security assessments of external partners. You will evaluate controls, analyze data flows, and produce risk-based reports while collaborating with Technology, Compliance, Legal and Procurement teams.

This role is based in Warsaw and requires strong cloud, IAM, network, and vulnerability management expertise.

Qualifications

• Bachelor's degree in information security, information systems, information technology, or a related field.
• Five or more years of experience in information security, technology risk, security engineering, security architecture, or third-party risk management.
• Strong technical understanding of cloud and software-as-a-service environments, identity and access management, network security, vulnerability management, and data protection.

Responsibilities

• Serve as a technical subject matter expert within our firm’s third-party information security risk management program.
• Perform in-depth security assessments of new and existing third parties that access, process, store, or transmit firm information.
• Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models.
• Analyze business use cases, data flows, system integrations, and technical architectures to establish appropriate risk context.
• Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and architecture documentation.
• Assess controls across identity, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response, and application security.
• Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediation plans.
• Produce concise, risk-based assessment reports that explain issue materiality, actual risk, and recommended next steps.
• Partner with Technology, Compliance, Legal, Procurement, and other stakeholders to support a consistent third-party risk management process.
• Improve assessment methodologies, processes, templates, and metrics while staying current on emerging threats and security practices.

Skills

Information security

Third-party risk

Security assessments

Cloud security

Identity management

Network security

Vulnerability mgmt

Frameworks (ISO/NIST)

Education

Bachelor's degree in information security

Tools

ISO 27001

NIST CSF

SOC 2

Job description

Point72 is seeking a seasoned security professional to lead third-party risk management and conduct in-depth security assessments of external partners. You will evaluate controls, analyze data flows, and produce risk-based reports while collaborating with Technology, Compliance, Legal and Procurement teams.

This role is based in Warsaw and requires strong cloud, IAM, network, and vulnerability management expertise.