[Hiring] Cyber Risk Advisor Operations Lead @IS3

Role Description

We are hiring for a large financial services client. You will help run the supplier cybersecurity risk program for a large financial services client. You run the operational side of the program, from audit findings to supplier requirements and assessment questions.

What you will do

• Manage audit and regulatory findings and their remediation plans
• Support internal audit and examiners
• Maintain the security requirements suppliers must meet and the assessment questions used to test them
• Keep both aligned to security standards and industry frameworks, such as NIST

Qualifications

• 8+ years in cyber risk or GRC, with 4+ years in third party risk
• Ownership of audit and regulatory findings and remediation plans
• Experience supporting internal audit and examiner requests
• Experience maintaining supplier security requirements and assessment question sets mapped to NIST CSF, NIST 800 53, and ISO 27001
• Leadership and influence skills

Requirements

• Bank regulator exam experience with the OCC, FRB, or FFIEC (Nice to have)
• Familiarity with FS ISAC and Shared Assessments (SIG) (Nice to have)
• Program or operating model design (Nice to have)

Preferred certifications

• CTPRP
• CISA
• CISSP
• CISM
• CRISC

Background we look for

Experience in a large financial services or other regulated enterprise (bank, insurer, card issuer, asset manager) is strongly preferred. Consulting experience from a Big 4 firm or managed security provider is welcome when you were embedded with an enterprise team.