Third Party Risk Senior Lead Job at Orbis Consultants (Austin)

Third Party Management Risk Senior Analyst

Shape your career with Citi in Dublin. By joining Citi, you will become part of ...

Location

Ireland , Dublin

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Relevant work experience
Outsourcing and Third Party regulatory policies and procedures knowledge a distinct advantage
Excellent verbal and written communication skills
Customer focused with excellent Interpersonal skills and ability to work well in a team environment collaborating across diverse groups
Articulate minute taking and follow up on all action points in a decision making committee or side meeting
Requires good analytical skills in order to filter, prioritize and validate potentially complex and dynamic material from multiple sources
Demonstrated understanding of operational risk and gap identification
Bachelor’s/University degree or equivalent experience
Ability to prioritize and manage multiple projects simultaneously
Ability to present a compelling case to influence others where appropriate

Job Responsibility

Participates in the application of Third Party risk policies, to all business and functions across Citi Europe plc
Required to turn the data into visual reports in PowerPoint that clearly report on any concerns found with the data
Minute taking of committee and internal governance meetings with second line of defence
Contributes to risk assessments and drives actions to address the root causes that persistently lead to operational risk losses by challenging both historical and proposed practices
Provides governance and oversight may include (not limited to) technology operational risk, risk for example
Evaluates the control environment by ensuring appropriate controls are in place
Coordinates audits, examinations, and deliverable requirements from internal and external reviewers by supporting coordinating activities
Ensures project completion, special assignments, and other ad hoc activities as required
Ensures the Operations Team is in compliance with all regulatory policies and procedures

What we offer

Competitive base salary (which is annually reviewed)
Business casual workplace
Hybrid working model (up to 2 days working at home per week)
Additional benefits that support you (and your family) to be well, live well and save well

Fulltime

Senior Third-Party Security Risk Analyst

As a Senior Third-Party Security Risk Specialist at Ledger, you will play a vita...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

Master degree in Information Security, Cybersecurity, or a related field
5+ years of progressive experience in third-party risk management, with a strong background in audit, risk management, compliance, or a related control function within a complex organization
Proven project management skills with the ability to manage complex, cross-functional projects and maintain comprehensive documentation
In-depth knowledge of security frameworks and standards (e.g., ISO 27001, NIST Cybersecurity Framework) and experience in applying them to third-party risk management and regulatory requirements
Excellent analytical and problem-solving skills with a focus on identifying root causes and developing effective solutions
Strong communication and interpersonal skills, including the ability to influence and negotiate with vendors and stakeholders at all levels

Job Responsibility

Conduct comprehensive security assessments of third-party vendors, including reviewing their security policies, procedures, and controls
Proactively identify and evaluate potential security/privacy risks associated with a particular focus on those that could impact Ledger's reputation, financial stability, and customer trust
Develop and implement risk mitigation strategies to address identified vulnerabilities
Lead the collaboration with vendors to remediate security gaps and ensure compliance with Ledger's stringent security requirements
Establish and maintain a robust vendor security monitoring program, driving continuous improvement in vendor security posture and compliance
Develop, implement, and continuously improve Ledger's third-party security risk management program, including policies, standards, procedures, and tools
Prepare reports and presentations on vendor security risks and mitigation efforts to senior management, stakeholders, and the Comex
Participate in audits as part of the Privacy audit program according to the agreed annual audit plan

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products

Fulltime

Legal Third-Party Management and Information Security Risk Lead

As part of the Legal Outside Counsel, Third Party Management and Operations team...

Location

United Kingdom , Belfast

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Ability to assess residual risk in complex vendor environments and make sound defensible recommendations
Experience applying risk-based frameworks to prioritize issues and mitigation efforts
Strong interpersonal skills for engaging legal, compliance, technology, procurement and senior risk stakeholders
Proficiency in creating clear and concise reports dashboards and governance experience
Leading or supporting cross functional projects, ability to support risk transformation initiatives, and integrate evolving legal tech and regulatory guidance into assessment methodologies
Bachelor’s degree or equivalent

Job Responsibility

Manage and oversee a set of complex initiatives that span multiple lines of business in the Cyber Security (CS), Information Security (IS) and Third-Party Risk Management (TPRM) space for Global Legal Solutions
Assess the risks and effectiveness of Third Party IS processes and controls based on enterprise requirements ensuring the IS risk is within tolerance
Evaluate the design and execution of the Legal IS Program, identifies potential enhancements and drives implementation of governance, methodologies and tools required for the effective oversight of Third-Party Management IS risk to continually strengthen the Program
Assist the day-to-day activities within the TPM Risk and Info Sec group
Monitor, track and control outcomes to resolve issues, conflicts, dependencies and critical path deliverables related to issues and gaps found in the TPISA process
Drive implementation of enterprise Third Party Management controls required to be assessed as part of the Managers Control Assessment, reviews results, and determines if remediation actions are appropriate
Document control design, testing methodology, and evidence for effectiveness reviews in compliance with Citi's Risk and Control Standards
Contribute to quarterly control certifications, issue management processes and audit engagements

What we offer

Generous holiday allowance starting at 27 days plus bank holidays
increasing with tenure
A discretional annual performance related bonus
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Access to an array of learning and development resources
Private medical insurance packages to suit your personal circumstances

Fulltime

Senior Third-Party Security Risk Analyst

As a Senior Third-Party Security Risk Specialist at Ledger, you will contribute ...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

Master degree in Information Security, Cybersecurity, or a related field
5+ years of progressive experience in third-party risk management, with a strong background in audit, risk management, compliance, or a related control function within a complex organization
Proven project management skills with the ability to manage complex, cross-functional projects and maintain comprehensive documentation
In-depth knowledge of security frameworks and standards (e.g., ISO 27001, NIST Cybersecurity Framework) and experience in applying them to third-party risk management and regulatory requirements
Excellent analytical and problem-solving skills with a focus on identifying root causes and developing effective solutions
Strong communication and interpersonal skills, including the ability to influence and negotiate with vendors and stakeholders at all levels.

Job Responsibility

Conduct comprehensive security assessments of third-party vendors, including reviewing their security policies, procedures, and controls
Proactively identify and evaluate potential security/privacy risks associated with a particular focus on those that could impact Ledger's reputation, financial stability, and customer trust
Develop and implement risk mitigation strategies to address identified vulnerabilities
Lead the collaboration with vendors to remediate security gaps and ensure compliance with Ledger's stringent security requirements
Establish and maintain a robust vendor security monitoring program, driving continuous improvement in vendor security posture and compliance
Develop, implement, and continuously improve Ledger's third-party security risk management program, including policies, standards, procedures, and tools
Prepare reports and presentations on vendor security risks and mitigation efforts to senior management, stakeholders, and the Comex
Participate in audits as part of the Privacy audit program according to the agreed annual audit plan.

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products.

Fulltime