Third Party Risk Specialist - Associate

Job Description

• The Vendor Risk Specialist at iCapital Network evaluates the risk of third-party vendors • Engages internal vendor relationship owners and vendor contacts to obtain various artifacts and question/answers for review • Identifies outstanding risks and presents them to management for risk acceptance • Communicates with third-party vendors to obtain artifacts and answers for vendor security assessment • Recommends mitigating/compensating controls for vendor security programs • Communicates and tracks remediation plans with third-party vendors, business, and technology partners • Escalates outstanding risk items to management • Maintains and presents metrics on the vendor risk program to management • Assists the assurance team with client DDQs as vendor risk and client assurance are related programs

Qualifications

• Five years experience in a technology role with two to three years in a vendor risk role • A bachelor's degree in computer science or technology/information security-related field • Experience with Coupa or other vendor GRC tools a plus • Experience with RiskRecon or other security risk measurements tools a plus • Understanding of ISO-27001 or NIST 800 based security program standards • Knowledge of relevant legal requirements, regulatory requirements, and privacy laws • Knowledge of security risks pertaining to cloud (IaaS, SaaS, AaaS) • A quick learner with desire to continually learn • Excellent communication skills including strong English writing skills • Detail oriented to ensure that all requirements are met and documented

Benefits

• 100% employer paid dental, vision, telemedicine, and virtual mental health counseling • Generously subsidized healthcare • Employer matched retirement plan • Parental leave • Unlimited paid time off (PTO)