Third Party Risk Management (TPRM) Staff

Knowledge of various assessment types (e.g., risk assessment / vendor security assessment, risk management and controls review, audits, gap analysis, regulatory compliance review, ISO 27001 readiness, IT Policy review, cloud security assessments)
Understanding of key industry control frameworks (NIST Cyber Security Framework, COSO, COBIT, ISO 27000, Unified Compliance Framework, etc.), business continuity management and cloud security
Understanding of Information Security policies and standards
Knowledge and understanding of systems architecture, infrastructure, security, and applications
Strong analytical capabilities
Excellent communications skills
Ability to communicate basic Information Security Risk assessment information to non-technical business leaders to ensure they comprehend the risk being assigned to them
Able to effectively communicate evaluation of risk remediation plans to action plan owners to ensure that mitigation activities are appropriately addressed
Knowledge on business processes and their relationship to technology
Qualification

Bachelor’s degree in commerce, accountancy, or other risk management practice desired
6 mos - 1 year of relevant experience of any of the following:
Third Party Risk Management
Resilience Management
Risk and Control
Information Security and/or Risk Management
About The Global Professional Services Firm

A Global leader in Assurance, Tax, transaction and advisory services.