Consultant/Manager - Third Party IT Risk Management

Experience: 2 to 13 Years

Levels:

2+ Years (ACON level)

3+ Years (CON Level)

5+ Years ( AM level)

7+ Years (Manager Level)

Technical Skill Requirements:

1. Expertise in IT internal audit, Information Security/cybersecurity, IT SOX, Third Party Risk Assessment Reporting e.g., SOC1, SOC 2.

2. Relevant expertise on CSA STAR requirements, ISO control, NIST Standards, PCI DSS and GDPR requirements.

3. Experience in performing control testing, IT / infosec risk assessments, network security, Infrastructure assessments.

4. Knowledge of technical domains such as cloud security and application security.

5. Certification: CISA, CISSP, CEH, ISO, PCI DSS, NIST

Responsibilities:

- Clear understanding of TPRM - Third Party Risk Management lifecycle

- Possess advanced knowledge of network and application vulnerability assessment, IT practices, risk assessment practices, change control, data privacy, and business continuity.

- Strong attention to detail with an analytical mind and outstanding problem-solving skills.

- Interpret the details from the SOC, ISO reports.

- Application security reviews

- Skills to be mentioned while searching profiles in portals:

- Strong in Risk consulting, Third Party Risk Management, Assurance (third party assurance), control testing.