Junior Analyst, Third-Party Risk Management

Vaga não está no LinkedIn

🕒 Julho 27

🗽 New York – Remoto

🗽 New York – Remote

⏰ Tempo Integral

🟢 Júnior

🔒 Seguros

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

National Trust

SiteLinkedInTodas as Vagas

10.000+ funcionários

🤲 Filantropia

🏨 Hospitalidade

🛒 Varejo

Charity • Hospitality • Retail

O National Trust é a maior organização de conservação da Europa e uma instituição de caridade registrada que protege e abre casas históricas, jardins, parques, áreas rurais e patrimônios culturais na Inglaterra, País de Gales e Irlanda do Norte. A organização opera uma ampla gama de serviços para visitantes — incluindo alimentação e bebidas, varejo, férias, experiências para visitantes e programas educacionais — e promove programas de gerenciamento de propriedades, conservação, arrecadação de fundos, voluntariado e aprendizagem para cuidar dos locais e engajar milhões de visitantes a cada ano.

Descrição

• Support its Third-Party Risk Management program within a highly regulated banking environment. • Conduct initial and ongoing risk assessments for new and existing vendors, with emphasis on cybersecurity and data protection. • Evaluate vendor due diligence responses, including information security, security architecture, and cloud environments. • Identify control gaps and recommend risk mitigation strategies. • Assess vendors handling sensitive data, critical systems, or customer information. • Support vendor due diligence, concentration risk, fourth-party risk, and business continuity assessments. • Assist with preparation for regulatory examinations and internal audits. • Maintain documentation demonstrating regulatory compliance and risk-based decision making. • Support updates to TPRM policies, procedures, and standards. • Assess vendor security programs against recognized frameworks, including: NIST Cybersecurity Framework, ISO 27001, SOC 2 Type II. • Support monitoring of critical and high-risk vendors. • Track vendor performance, compliance, and remediation activities. • Prepare risk summaries and reporting materials for leadership. • Escalate significant risks in a timely manner. • Review vendor incident response and breach notification processes. • Evaluate business continuity and disaster recovery capabilities. • Prepare concise risk reports for senior leadership and risk committees. • Maintain accurate documentation within the TPRM system. • Partner with Information Security, Compliance, Legal, Procurement, and business units.

🎯 Requisitos

• Bachelor's degree in business, Information Security, Cybersecurity, Risk Management, Finance, or related field. • 1-3 years of experience in TPRM and Information security risk • Experience working in an OCC-regulated financial institution (preferred) • Exposure to cloud risk management (AWS, SaaS environments) (preferred) • Experience using TPRM platforms (preferred) • Working Knowledge of Risk assessment methodologies (inherent vs. residual risk) • NIST Cybersecurity Framework • ISO 27001 • SOC 2 reports

🏖️ Benefícios

• Medical, Dental, and Vision insurance • 401(k) • life and disability insurance