Company: Bank

Position: Third Party Risk Assessor  

Location: Chicago, IL; Denver, CO; (Hybrid, 3 day in office, 2 day remote)

Schedule: Hybrid (3X/week onsite)

Duration: 12-month contract

Description:

• This job is responsible for performing information security reviews of third parties that provide services to the bank.
• This includes pre-assessment, assessment, and/or remediation activities.
• Key responsibilities include validating assessment scope, partnering with enterprise vendor managers and third parties to prepare them for the assessment, collecting and reviewing documentation during the assessment, determining if information security controls are in place, and completing assessment workpapers.
• Assessors examine a third party's program to determine if they meet Client requirements, identifying control gaps that may expose client to risk.
• Manage and maintain compliance risk findings/ gap documentation to communication to Senior leaders the appropriate risk as a result of the assessment.
• Opportunities to be involved in projects to improve processes & transform the assessment program.
• The opportunities will enable you to leverage and grow your leadership skills as you'll be expose to various internal stakeholders and industry partners.

Must Have:
• Must be able to travel up to 50% (i.e., every other week 3-4 day a week)
• The ability to interact with internal or external stakeholders including business partners and/or external parties to identify, analyze, and resolve complex problems or security gaps.
• The ability to objectively assess information from various sources and synthesize it towards making a reasoned judgment
• The ability to assess the security, effectiveness, and practicality of technology systems
• Information Security Controls (Infrastructure Security, Access Management, Physical Security, Application Security, etc.)
• IT Compliance, SOX Compliance
• Change Management
• Enterprise Risk Management
• Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards

NiceToHave:

Plusses

Audit and risk experience (assurance/advisory professional). 

You can reach me at 973-381-7135 or dimpy.sachdeva@collabera.com

Thanks,