Back
Tier-1 brand and Bangalore metro increase applicant density, but senior specialized role limits some competition.
Requires specialized cybersecurity and regulatory third-party risk experience, somewhat transferable but biased toward financial services.
Explicit 10-year requirement plus preferred certifications and deep regulatory/cyber expertise increases filtering rigidity.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Perform comprehensive cyber/information security assessments of third-party service providers utilizing State Street’s risk management framework.
Analyze third party security attestations and certifications (e.g., SOC2, SIG, NIST, ISO 27001/2) to identify information security risks.
Document assessment outcomes aligned with TPCRM, Issue Management, and Enterprise Risk Management standards, and provide expert recommendations on identified issues.
10 years of experience in Cyber/Information Security, Third Party Cyber/Information Security Assessment, or Cyber Security Assessments.
Knowledge of security and risk management frameworks and regulations such as ISO 27001/27002, NIST, FRB/OCC Third Party Risk Management Guidelines, FFIEC Security Handbook, GDPR, and DORA.
Bachelor's and/or Master’s degree in Cybersecurity, Law, Privacy, Enterprise or Operational Risk Management preferred.
The role requires strict onsite work location.
Demonstrated expertise in executing third-party information security assessments within large financial or regulated institutions.
Strong ability to communicate complex cyber security issues effectively to both technical and non-technical stakeholders through detailed reports and presentations.
Familiarity with multiple cyber security certification and attestation standards and their application in third-party risk management frameworks.