TL;DR

OCRA /Third Party Risk Assessor (Cybersecurity): Responsible for evaluating the security posture of third-party vendors with an accent on identifying and mitigating potential security threats. Focus on conducting comprehensive risk assessments, ensuring compliance with cybersecurity policies, and developing robust risk mitigation strategies.

Location: Must be based in New York, United States

Salary: $140,000–$180,000 USD

Company

%hirify_global% is a leading global wealth manager and universal bank, headquartered in Zurich, Switzerland, offering diversified asset management and investment banking capabilities.

What you will do

Evaluate the security posture of third-party vendors accessing sensitive information or systems.
Conduct risk assessments to identify and evaluate potential security threats posed by vendors.
Recommend and implement risk mitigation strategies to minimize cyber threat exposure.
Ensure third-party vendor compliance with cybersecurity policies and procedures, including Cloud assessments.
Analyze and evaluate vendor security controls, policies, and procedures for compliance with regulatory requirements.
Communicate assessment findings and recommendations to internal stakeholders and management.

Requirements

Bachelor's degree with professional certification in Cybersecurity, Cloud Security, or a related field.
5+ years of experience in third-party risk assessment or cybersecurity assessment.
Strong analytical and problem-solving skills with an audit mindset.
Experience with industry recognized standards for IT security controls and best practices like NIST, ISO27001, PCI DSS, COBIT, SOC 2.
One of the following professional qualifications obtained: CEH, CISSP, CISA, CISM, CRISC or ITIL.
Ability to communicate effectively with good spoken and written English.

Nice to have

Certifications such as Certified Third-Party Risk Professional (CTPRP).

Culture & Benefits

Work in a world-class Cyber Security Operations Center for a leading Swiss private bank.
Join a multinational team of Cyber Security professionals.
Opportunities to grow and learn how to defend an enterprise against cyber-attacks.
Flexible working options when possible.
Inclusive culture that values diverse skills, experiences, and backgrounds.
Commitment to disability inclusion and providing opportunities for Veterans.

Hiring process

May include one or more assessments during the application process.