Third Party Cyber Security Assessor

Jobtailor; Colorado; On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor is seeking a seasoned Information Security and IT Audit professional in Colorado to perform security reviews of third-party service providers for a bank. You will collect and review documentation, document controls, and evaluate third-party risk while collaborating with vendor managers.

The role requires solid knowledge of NIST, PCI, ISO, SDLC, COBIT and ITIL standards, plus strong technical writing and communication skills. Travel up to 15% may be required.

Qualifications

• 3 Years experience in Information Security and/or IT Audit.
• Technical writing and verbal communication skills.
• Ability to effectively work with partners at varying knowledge and organization levels.
• Technical skills in Security Controls, IT Compliance, SOX Compliance, Change Management, Enterprise Risk Management.
• Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards.
• Desired: Information Security certifications including ISO27002 / CISSP / CEH / CISM / CISA.

Responsibilities

• Performing information security reviews of third parties providing services to the bank.
• Collecting and reviewing documentation, including playbooks and evidence during assessment.
• Documenting controls in assessment workpapers.
• Evaluating third parties' information security risk.
• Discussing information security gaps with third parties.
• Managing relationships with third parties and Enterprise Vendor Managers.
• Ability to travel up to 10-15%.

Skills

Information Security

IT Audit

Security Controls

SOX Compliance

Change Management

Enterprise Risk Management

Technical Writing

Verbal Communication

Risk Evaluation

Documentation

Tools

NIST

PCI

ISO

SDLC

COBIT

ITIL

Job description

• Performing information security reviews of third parties providing services to the bank
• Collecting and reviewing documentation, including playbooks and evidence during assessment
• Documenting controls in assessment workpapers
• Evaluating third parties' information security risk
• Discussing information security gaps with third parties
• Managing relationships with third parties and Enterprise Vendor Managers
• Ability to travel up to 10-15%

Requirements

• 3 Years experience in Information Security and/or IT Audit
• Technical writing and verbal communication skills
• Ability to effectively work with partners at varying knowledge and organization levels
• Technical skills in Security Controls, IT Compliance, SOX Compliance, Change Management, Enterprise Risk Management
• Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards
• Desired: Information Security certifications including ISO27002 / CISSP / CEH / CISM / CISA

Core Competencies

Demonstrates expertise in Information Security and IT Audit, with a strong focus on evaluating third-party security risks and managing vendor relationships. Proficient in technical writing and communication, with a solid understanding of compliance standards and security controls.

Highest-signal resume keywords

• Information Security
• IT Audit
• Security Controls
• SOX Compliance
• NIST Standards

ATS Optimization Keywords

Hard Skills

• Information Security
• IT Audit
• Security Controls
• SOX Compliance
• Change Management
• Enterprise Risk Management
• Technical Writing
• Verbal Communication
• Risk Evaluation
• Documentation

Soft Skills

• Relationship Management
• Collaboration
• Communication

Certifications & Qualifications

• ISO27002
• CISSP
• CEH
• CISM
• CISA

Tools & Technologies

• NIST
• PCI
• ISO
• SDLC
• COBIT
• ITIL