Officer, Third-Party Information Security Analyst

Sumitomo Mitsui Trust Bank Limited New York Branch; New York (NY); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Paid Time Off

Medical & vision

401(k) plan

Commuter benefits

Job summary

Sumitomo Mitsui Trust Bank, Limited— SuMi Trust in New York— seeks an experienced Third Party Information Security Analyst. The role focuses on assessing and monitoring third-party information security risks and coordinating vendor due diligence.

You will review SOC 2, ISO 27001 and related documentation, maintain risk records, and support internal audits. Hybrid work in NYC is offered.

Qualifications

• 3+ years in risk assessment and Third Party Risk Management lifecycle.
• Experience with financial services and TPRM platforms like Prevalent.
• Familiarity with SOC 2, ISO 27001 and related security docs.
• Strong verbal and written communication and analytical skills.

Responsibilities

• Conduct initial and ongoing information security risk assessments of third parties.
• Review security docs (SOC reports, ISO 27001, questionnaires, BCDR docs).
• Document findings and risk ratings in the TPRM platform with tracking.
• Coordinate vendor onboarding/offboarding with relevant teams.
• Monitor security incidents involving third parties and request info as needed.
• Participate in internal audits and external examinations.
• Assist in maintaining TPRM policies and procedures.
• Perform other duties as assigned by management.

Skills

Risk assessment

TPRM Lifecycle

TPRM platform

SOC 2

ISO 27001

NIST CSF

Cyber Risk Institute

Communication

Analytical

Time management

Education

Tools

Prevalent

Job description

Sumitomo Mitsui Trust Bank, Limited— SuMi Trust in New York— seeks an experienced Third Party Information Security Analyst. The role focuses on assessing and monitoring third-party information security risks and coordinating vendor due diligence.

You will review SOC 2, ISO 27001 and related documentation, maintain risk records, and support internal audits. Hybrid work in NYC is offered.