Third-Party Risk Management (TPRM) - Information Security Senior Consultant

Job Description: Key Responsibilities: • Performing risk assessment for business applications, business processes, and specific scenarios (when outsourcing is considered, for critical changes, prior to projects, and when considering a new product or technology) following our Information Security Risk Management Methodology. • Participate in Security Assessments/Compliance of infrastructure, systems and applications, changes and provide required advise from risk perspectives • Work on improvements for provided security services, including the continuous enhancement of existing risk practice and methodology material. • Work on measuring the effectiveness of Risk KPI/KRI and work to improve it on regular basis. Experience / Competency: • Prior experience in conducting information security asset based risk assessments taking into account asset value, threat-vulnerability, likelihood, and impact. • Prior experience in conducting risk assessment for business applications, databases, servers, network devices, mobile applications. • Prior experience in conducting project risk assessment and new technology / IT change risk assessments. • Prior experience defining vendor risk framework and conducting vendor / third party risk assessments. • Understanding of ISO 27001, ISO 31000, OCTAVE, NIST risk management methodologies. • Understanding of threats, vulnerabilities, IT network architecture, security controls and solutions. • Ability to understand VA/PT and any other technical assessment findings and provide recommendations. • Good understanding of secure SDLC, cryptography • Good understanding of BCM, IT DR with perspective of addressing cyber security risks. • Experience with risk assessment in banking sector is desired and preferred. • Ability to develop quality reports and presentations