Security TPRM Specialist

Michael Page Technology

• Collate and produce reports providing evidence for senior management that all key risks are identified, mitigated, and monitored.
• This role forms a key part of the Security Governance Team, supporting the Security TPRM lead in the tactical delivery of Security due diligence and evaluation of the EMEA critical third party risk posture for a 6 month period.

Client Details

My client – an organisation in the Financial Services sector are looking for a Security TPRM Specialist- join their site in London remotely on an initial 6-month contract!

Description

The successful candidate for the Security TPRM Specialist – Financial Services sector 6-month contract role will fulfil the following responsibilities:

• Review and validation of in scope assessments on critical Third-Party list
• Mapping of ICT third party providers (in accordance with DORA requirements)
• Completion of Inherent risk assessment for critical TP list
• Completion of due diligence on all critical third-party providers in scope
• Completion of residual assessment and informing on risk posture following controls assessment
• SME support in the delivery of security TPRM due diligence to EMEA critical supplier population
• SME support in the delivery of security controls relevant to TPRM, identified through assessments and BAU and remediation actions definition

Profile

To be considered for the Security TPRM Specialist – Financial Services Sector contract role in London/ remote the candidate must present evidence of the following:

• Experience delivering third party due diligence, working in a TPRM security specialist capacity. This include but is not limited to analysing responses, providing risk posture information and managing relevant relationship owners
• Risk management techniques such as risk identification, risk evaluation, control mapping and mitigation tracking
• Performance management techniques including developing and maintaining KPIs (and KRIs) and appropriate tolerances
• Working knowledge of third-party regulations across UK and EU such as EBA, DORA and standards is expected.
• Working with Information and Cyber Risk Frameworks and Standards (e.g., NIST / ISO27001) as well as Regulatory frameworks (e.g., Bank of England FCA/PRA, EU)
• Stakeholder management, including working with diverse teams in EMEA, North America, Ireland and Japan
• Managing multiple competing demands for information from service providers, senior management, auditors, and regulators, while ensuring all evidence supplied is accurate, appropriate and timely
• Delivering a well-defined TPRM security risk posture report that reports into the Board level committee or similar.
• Close working with North America and Ireland colleagues and with IT, Risk Management Department, Compliance, HR and other teams

Job Offer

• 6 month contract
• £300 daily inside IR35
• Hybrid working in London/ remote- up to 3 days p/week on site.