Cybersecurity Supplier IT Risk Management Analyst

Your new company

An international well-known company is entering the Cracow market and establishing IT structures. We are looking for Cybersecurity Supplier IT Risk Management Analyst to join the new team.

Your new role

This role is responsible for executing supplier assessments supporting the global Cybersecurity Supplier IT Risk Management Program.

Duties and Responsibilities:

• Execute security risk assessment and analysis of suppliers across all stages of the supplier lifecycle and partner with global vendor management teams, technology, and business functions to educate and communicate cyber risk.
• Support implementation and operation of program enhancement efforts including assessment process and technical requirements. Train team members and stakeholders on updated program and processes changes.
• Prepare and communicate monthly program metrics and reporting to appropriate program lead.
• Provide input on third party security controls, exceptions, and remediation plans to continuously improve assessment process to reduce cyber risk.

What you'll need to succeed

• Bachelor’s Degree in Information Technology, Information Systems, Computer Science or a related technical field of study. Related experience may be considered in lieu of required education.
• 2+ years of experience in IT audit, supplier IT risk, vendor, or third-party security risk management.
• Working experience with third party security assessment and management tools (Archer preferred)
• Working experience in third party security risk assessment methodologies and industry frameworks.
• Knowledge of Shared Assessment Third-Party Risk Management practices and questionnaires.
• Solid experience in application, network, and cloud security domains and assessments.
• Strong critical thinking and planning skills.
• Experience in large enterprise environments.
• Excellent oral and written communication and ability to engage with stakeholders across the enterprise.

Hays Poland sp. z o.o. is an employment agency registered in a registry kept by Marshal of the Mazowieckie Voivodeship under the number 361.