Senior Third-Party Information Security Risk Analyst (Hybrid NYC)

Sumitomo Mitsui Trust Bank Limited New York Branch; New York (NY); Hybride; USD 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Comprehensive benefits

Résumé du poste

Sumitomo Mitsui Trust Bank Limited New York Branch is seeking an experienced Third Party Information Security Analyst in New York. This hybrid role focuses on assessing and monitoring information security risks across third, fourth and other parties.

You will handle vendor due diligence, security reviews, and ongoing risk assessments to ensure alignment with security requirements. The role supports Information Risk Governance within the Americas Division, coordinates with Administration and

Qualifications

• 3+ years of experience with risk assessment methodologies and Third Party Risk Management lifecycle.
• Strong knowledge of information security frameworks (NIST CSF, ISO/IEC 27001, Cyber Risk Institute Profile).
• Strong verbal and written communication skills; strong analytical abilities.

Responsabilités

• Conduct initial and continuous information security risk assessments of third parties.
• Review third party security documentation (SOC reports, ISO 27001, security questionnaires).
• Document findings in the TPRM platform with tracking and due dates.

Connaissances

Risk assessment methodologies

Third Party Risk Management (TPRM)

Information security frameworks (NIST,

Outils

Prevalent

Description du poste

Sumitomo Mitsui Trust Bank Limited New York Branch is seeking an experienced Third Party Information Security Analyst in New York. This hybrid role focuses on assessing and monitoring information security risks across third, fourth and other parties.

You will handle vendor due diligence, security reviews, and ongoing risk assessments to ensure alignment with security requirements. The role supports Information Risk Governance within the Americas Division, coordinates with Administration and