Third-Party Cyber Security Assessor — Vendor Risk

Jobtailor; Colorado; On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor is seeking a seasoned Information Security and IT Audit professional in Colorado to perform security reviews of third-party service providers for a bank. You will collect and review documentation, document controls, and evaluate third-party risk while collaborating with vendor managers.

The role requires solid knowledge of NIST, PCI, ISO, SDLC, COBIT and ITIL standards, plus strong technical writing and communication skills. Travel up to 15% may be required.

Qualifications

• 3 Years experience in Information Security and/or IT Audit.
• Technical writing and verbal communication skills.
• Ability to effectively work with partners at varying knowledge and organization levels.
• Technical skills in Security Controls, IT Compliance, SOX Compliance, Change Management, Enterprise Risk Management.
• Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards.
• Desired: Information Security certifications including ISO27002 / CISSP / CEH / CISM / CISA.

Responsibilities

• Performing information security reviews of third parties providing services to the bank.
• Collecting and reviewing documentation, including playbooks and evidence during assessment.
• Documenting controls in assessment workpapers.
• Evaluating third parties' information security risk.
• Discussing information security gaps with third parties.
• Managing relationships with third parties and Enterprise Vendor Managers.
• Ability to travel up to 10-15%.

Skills

Information Security

IT Audit

Security Controls

SOX Compliance

Change Management

Enterprise Risk Management

Technical Writing

Verbal Communication

Risk Evaluation

Documentation

Tools

NIST

PCI

ISO

SDLC

COBIT

ITIL

Job description

Jobtailor is seeking a seasoned Information Security and IT Audit professional in Colorado to perform security reviews of third-party service providers for a bank. You will collect and review documentation, document controls, and evaluate third-party risk while collaborating with vendor managers.

The role requires solid knowledge of NIST, PCI, ISO, SDLC, COBIT and ITIL standards, plus strong technical writing and communication skills. Travel up to 15% may be required.