Information Security Associate

Role Overview: As a Third-Party Vendor Risk Analyst, your main responsibility is to conduct comprehensive risk assessments of third-party vendors. This involves evaluating their information security practices, operational capabilities, and compliance with legal and regulatory requirements. Additionally, you will be tasked with performing due diligence on both prospective and existing vendors to ensure they adhere to the organization's standards for security, privacy, and business continuity. Key Responsibilities: - Conduct comprehensive risk assessments of third-party vendors - Perform due diligence on prospective and existing vendors - Continuously monitor third-party risk exposure and generate regular reports - Review and manage vendor contracts - Collaborate with internal stakeholders and vendors to develop risk mitigation strategies - Assist in the development and maintenance of third-party risk management policies - Work closely with internal teams to ensure a unified approach to third-party risk management - Ensure compliance with relevant regulations, standards, and guidelines - Conduct periodic vendor audits - Assist in the investigation and resolution of third-party risk incidents Qualifications Required: - Bachelor's degree in a related field such as Information Security, Risk Management, or Business Administration - Relevant certifications such as Certified Third Party Risk Professional (CTPRP) or Certified Information Systems Auditor (CISA) would be a plus - Strong understanding of information security practices, operational capabilities, and regulatory requirements - Excellent communication and collaboration skills - Ability to analyze complex information and make informed decisions - Experience in vendor risk management or a related field would be advantageous,