Enterprise Cybersecurity Supplier and Third Party Cyber Risk SME

The Enterprise Cybersecurity Supplier and Third Party Cyber Risk SME will develop and mature a program to tier suppliers based on risk factors and a supplier-based threat model, and evaluate suppliers' cybersecurity management practices.

Requirements

• 5+ years of experience in cybersecurity, cyber risk, or cyber governance functions
• 3+ years of experience operating in a role focused on Third-Party Cyber Risk
• Experience with cybersecurity principles, best practices, and risk frameworks
• Experience using Microsoft Office Pro Suite and SharePoint
• Experience in risk identification, quantification, assessment, and reporting
• Experience with GRC platforms such as Archer and ServiceNow
• Experience leading a third-party risk program or workstream
• Knowledge of evaluating and assessing suppliers against cybersecurity principles and regulatory compliance

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care
• Recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values