Description:

• This position is to conducts assessments of third party suppliers in support of our Supplier Information Risk Governance Strategy.

Ideal Background:

• The position will perform security risk assessments of our third parties in support of our “Vendor Management Enterprise Policy” and Risk Governance Strategy.

Experience:

• Specific experience with IT Security and IT Auditing

Top Requirements:

• Technical /Analytical Skills ( 3+ years)
• Multi tasking and managing tasks and projects (3+ years)
• Excellent written and verbal skills

Team and Team size:

• 40 international al peers (Philippines, Colombia, UK) and 10 US peers.

Team's Skill Sets:

• IT Auditors
• IT Security Certifications Desired: CISSP, CISA, CIA, CompTIA A +, CRISC, (ISC)2, CISM

Major Job Functions/Components:

• Consistently leads projects with minimal supervision and demonstrates technical proficiency for assigned assessments.
• Executes scoping and planning activities, performs detailed procedures and develops final report.
• Anticipates customer needs and proactively develops solutions to meet them.
• Provides explanations and information to others on the most complex issues and performs complex conceptual analysis.
• Coordinates testing and documentation requests to ensure IT assessment procedures address the objectives, scope and risks
• Assists with preparing and educating business partners and control owners on requirements and expectations for IT assessments and IT security protocols.
• Develops strong relationships with key business stakeholders.
• Reviews work performed by others, provide recommendations for improvement and ensure resources are allocated to meet project deadlines.
• Participates on special projects undertaken by the department and/or the Company

Required Qualifications and Skills:

• 3+ years of relevant business experience, including internal audit or IT experience

• Must have a general understanding of security and risk concepts and principles and how to apply the them.
• Must be able to meet deadlines, prioritize/multitask work
• Great communication skills both oral and written
• Must have technical and analytical skills
• Knowledge of of PCI, HIPPA, HITRUST, SSAE18, SOX 404