Cyber Risk Analyst assessing third-party vendor cybersecurity risks for S&P Global. Collaborating with teams to evaluate vendors' security postures and enhance risk management processes.
Responsibilities
Conduct thorough Cybersecurity, Business Continuity, Artificial Intelligence for Cloud Service Prover, Non-Cloud Service Providers Vendors, evaluating their information security posture.
Effectively collaborate with internal teams to identify critical vendors and assess their potential impact on the organization's cyber risk profile.
Communicate risk assessment findings and recommendations to key stakeholders, including senior management, legal, and compliance teams.
Work closely with vendors to address identified security gaps and ensure they meet the organization's cybersecurity requirements.
Review the vendors on the continuous monitoring program and assisting in driving the periodically review the vendors.
Monitor and stay abreast of evolving cybersecurity threats and industry trends to enhance the effectiveness of the risk assessment process.
Support enhancement projects within Vendor Risk Management to meet various business and regulatory requirements.
Assist the team members in balancing the load and managing Ad-hoc projects.
Requirements
Bachelor’s degree in computer science or engineering or equivalent
Minimum 3-5 years of experience in Information Security or Technology Risk Management
Any prior exposure to vendor risk management and/ or privacy laws and regulations is a plus.
Demonstrable understanding of the concepts of technology controls and information security controls.
Exposure to cloud technologies and cloud security is highly desired; the familiarity with public cloud technologies such as Amazon Web Services (AWS) or Microsoft Azure or Google Cloud is highly preferred.
Exposure to Cyber contract reviews is an advantage
Excellent communication skills - a must. The resource should have the ability to communicate with cross-functional teams and vendors, both written and oral communication is critical.
Benefits
Health & Wellness: Health care coverage designed for the mind and body.
Flexible Downtime: Generous time off helps keep you energized for your time on.
Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.
Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.
Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.
Beyond the Basics: From retail discounts to referral incentive awards—small perks can make a big difference.
Enterprise Security Analyst II protecting data integrity and implementing security policies at Pekin Insurance. Involves risk assessments and compliance activities in a hybrid work environment.
Cybersecurity Analyst leading CMMC compliance efforts for GM Defense and U.S. Government programs. Collaborating with multiple teams to ensure adherence to cybersecurity standards.
Cybersecurity Analyst role at Fidelity Investments, assisting with client security inquiries and managing cybersecurity program communications. Requires a bachelor’s degree and relevant experience.
External Footprint Security Analyst safeguarding public - facing digital assets with expert cybersecurity skills at HID Global. Design and implement proactive strategies for identifying and mitigating vulnerabilities across multiple locations.
Sr. Information Security Analyst managing information security strategy and execution at Otter Products in Fort Collins, CO. Leading initiatives for enterprise security programs and incident response.
Entry level Information Security Analyst working on assignments to monitor systems for unusual activity. Contributing to technology supporting the mission of the Church.
Security Analyst supporting delivery of managed security services for higher education clients at Asiera. Responsibilities include incident management, threat hunting, and collaboration with multiple teams.
Senior Cybersecurity Analyst designing and improving information security processes at Localiza&Co. Collaborating with various teams to ensure governance and data safety.