Associate Director, Cyber Risk & Third-Party Due Diligence

The Depository Trust & Clearing Corporation (DTCC); Tampa (FL); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Pension / Retirement

Flexible/hybrid model

Job summary

The Depository Trust & Clearing Corporation (DTCC) is seeking a senior cyber risk lead to direct the Cyber Security Due Diligence SME team. You will assess third party technology, resilience, and security controls across DTCC's vendor ecosystem, and guide remediation and onboarding activities with cross-functional teams.

You will collaborate with Business, Legal, Sourcing, and Technology stakeholders to strengthen the Third Party Risk Management program and ensure regulatory alignment and robust

Qualifications

• 8+ years in cyber security, cyber operations, cyber risk, IT audit, or technology risk.
• Bachelor's degree preferred or equivalent experience.
• Certifications such as CISSP, CISA, CRISC or equivalent are a plus.
• Knowledge of CRI, NIST CSF, FFIEC/FFI guidelines is beneficial.

Responsibilities

• Lead the Cyber Security Due Diligence SME team for third party technology and resilience risk assessments.
• Oversee third party onboarding and risk-based decision making in accordance with DTCC policies.
• Escalate complex cyber security and remediation risks identified during assessments.
• Develop reporting on KRIs and program effectiveness for executive stakeholders.

Skills

Cybersecurity

Risk management

Regulatory awareness

stakeholder communication

Education

Bachelor's degree

Certifications such as CISSP/CISA/CRISC

Job description

The Depository Trust & Clearing Corporation (DTCC) is seeking a senior cyber risk lead to direct the Cyber Security Due Diligence SME team. You will assess third party technology, resilience, and security controls across DTCC's vendor ecosystem, and guide remediation and onboarding activities with cross-functional teams.

You will collaborate with Business, Legal, Sourcing, and Technology stakeholders to strengthen the Third Party Risk Management program and ensure regulatory alignment and robust