My client within the financial services industry is looking to bring in a Third Party ITSecurityManager to join the team. Responsibilities: Execute Third Party Due Diligence, risk profiling, onboarding, re-certification; Make an opinion on Third Party Security Posture; Define Remediation where applicable Support Contract Management - ensure that the security expectations included in … the contract are proportionate to the risk profiling Requirements: Previous experience in Third Party Security Management (i.e. Due Diligence, etc.) is a must Knowledge of control frameworks, e.g., ISO 27000, NIST, CIS-18, COBIT-5 Knowledge of Swift CSP framework is essential Knowledge of relevant regulations, i.e. DORA, Outsourcing, ESMA, etc. Financial services experience Logistics: 12 month contract More ❯
My client within the financial services industry is looking to bring in a Third Party ITSecurityManager to join the team. Responsibilities: Execute Third Party Due Diligence, risk profiling, onboarding, re-certification; Make an opinion on Third Party Security Posture; Define Remediation where applicable Support Contract Management - ensure that the security expectations included in … the contract are proportionate to the risk profiling Requirements: Previous experience in Third Party Security Management (i.e. Due Diligence, etc.) is a must Knowledge of control frameworks, e.g., ISO 27000, NIST, CIS-18, COBIT-5 Knowledge of Swift CSP framework is essential Knowledge of relevant regulations, i.e. DORA, Outsourcing, ESMA, etc. Financial services experience Logistics: 12 month contract More ❯
Third Party Risk Manager (ITSecurity) Banking Hybrid: 3 days per week onsite in London 6 months £640 per day In short: We have designed and built new processes focusing on third party security vendors and we now require a Third Party Risk Manager to move us into the Operational and deliver the changes. In … full: You'll be: * Responsible for the delivery of security TPRM due diligence* Responsible for the delivery of security controls relevant to TPRM, identified through assessments and BAU including remediation actions* Responsible for SME reviewing security and resilience due diligence response outcomes from the wider TPM programme of work.* Responsible for strengthening the cloud due diligence process. … Accountability & Responsibilities: * Deliver security & resilience due diligence to EMEA critical third-party provider population* Act as an SME for security and resilience on the EMEA wide TPRM forum, to support the ongoing TPM transformation program.* Deliver TPRM remediation actions identified following the annual security controls maturity assessment.* Support the ongoing third party/cloud/application due More ❯
