Hybrid Cyber Risk & Third-Party Due Diligence Senior Associate

The Depository Trust & Clearing Corporation (DTCC); Tampa (FL); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Health and life insurance

Pension / Retirement benefits

Paid Time Off and Personal/Family Care

Flexible/hybrid model: 3 days onsite,

Job summary

DTCC is seeking an experienced professional to support the Cyber Security Due Diligence SME team within the Cyber Security Risk Office. You will assess third-party technology, cyber security, and operational resilience risks across the vendor ecosystem and help strengthen DTCC's risk management program.

You will collaborate with Business, Technology, Legal, Sourcing, Resilience, and Risk teams to perform due diligence, onboarding, and remediation activities, including fourth-party risk,

Qualifications

• Minimum of 6 years of related experience.
• Bachelor's degree preferred or equivalent experience.

Responsibilities

• Conduct technology, cyber security, operational resilience, and specialized risk assessments of third parties supporting DTCC's critical services.
• Provide subject matter expertise on third-party cyber risk management, regulatory requirements, and industry best practices.
• Partner with Sourcing, Legal, Enterprise Program Management, Architecture Review Board, Technology, Resilience, Security, and Business stakeholders to support onboarding, contract reviews, and risk-based decisions.
• Perform remediation efforts for identified third party control gaps and assessment findings, ensuring accountability and timely risk reduction.
• Build strong relationships with internal and external stakeholders and participate in process improvement discussions.
• Demonstrate effective written and verbal communication, guiding internal stakeholders on processes and addressing inquiries timely.
• Prioritize tasks and lead the execution of Third Party Risk Management frameworks and projects.
• Demonstrate thorough understanding of risk management processes with focus on third party risks.

Skills

Cyber risk management

Vendor risk assessment

Regulatory compliance

Stakeholder management

Education

Bachelor's degree or equivalent experience

Job description

DTCC is seeking an experienced professional to support the Cyber Security Due Diligence SME team within the Cyber Security Risk Office. You will assess third-party technology, cyber security, and operational resilience risks across the vendor ecosystem and help strengthen DTCC's risk management program.

You will collaborate with Business, Technology, Legal, Sourcing, Resilience, and Risk teams to perform due diligence, onboarding, and remediation activities, including fourth-party risk,