Senior Governance Risk and Compliance Associate – Third Party Risk

🔥 16 hours ago

🇺🇸 United States – Remote

💵 $85k - $120k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SitusAMC

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

💼 Consulting

📦 Logistics

🏠 Real Estate

💰 Private equity on 2020-05

Consulting • Logistics • Real Estate

SitusAMC is the leading independent provider of services, data, analytics, and technology that power the full lifecycle of commercial and residential real estate finance. The company delivers underwriting and investment advisory, securitization and capital markets support, primary and special servicing, portfolio and asset management, valuations, loan fulfillment, compliance and diligence, and staffing/outsourcing solutions. SitusAMC serves lenders, investors and servicers with market research, analytic tools and technology platforms across the US and Europe to support origination, transaction execution, servicing, and valuation of real estate assets.

📋 Description

• Monitor and investigate cybersecurity risks, threats, and opportunities • Identify, analyze, and recommend mitigation strategies for incidents across strategic, business, operational, and technical domains • Partner in developing and maintaining operational policies, standards, playbooks, guidelines, and procedures • Support implementation of technical platforms and process improvements that strengthen cybersecurity • Perform compliance gap analyses and prepare risk and remediation reports • Participate in internal cybersecurity projects that enhance organizational resilience • Collaborate on incident response and use case development • Support Third-Party Risk Management (TPRM) activities and vendor assessments • Assist with administration, monitoring, and reporting for assigned technology platforms • Support business continuity planning and disaster recovery compliance, data loss prevention, third-party risk management, and incident response activities • Perform other activities assigned by the manager

🎯 Requirements

• Bachelor’s degree in a related field or equivalent combination of education and experience • 5+ years of industry and/or relevant experience, typically with 1+ years in an Associate level role or external equivalent • 4+ years in Governance, Risk, Compliance, Audit, or Cybersecurity roles • At least one certification, such as CISSP, CISM, CISA, CRISC, CCSP, or equivalent • Experience applying risk management frameworks to identify and track risks and risk action items • Ability to assist with risk assessments, compliance gap analyses, and remediation planning • Hands-on proficiency with information security tools related to attack surface management, email security, data security posture management, and data loss prevention • Experience supporting Third-Party Risk Management (TPRM) activities and vendor assessments • Working knowledge of incident investigation techniques and incident response activities • Ability to craft policies, identify compliance issues, and create risks for tracking • Broad understanding of cybersecurity principles and network security • Knowledge of Mac, Windows, and Linux endpoints and operating systems • Familiarity with AWS and Azure cloud security best practices • Ability to create, track, improve, and report on Key Risk Indicators (KRIs) • Understanding of regulatory requirements and frameworks, including GDPR, CCPA, PCI, SOX, GLBA, and NIST • Understanding how compliance with laws and regulations influences security strategy • Strong analytical, problem-solving, and interpersonal skills • Excellent communication, documentation, and stakeholder management skills • Ability to produce reports, dashboards, and technical documentation

🏖️ Benefits

• Discretionary bonus eligibility for certain positions • Paid time off (PTO) • Paid holidays • Medical insurance • Dental insurance • Vision insurance • Life insurance • Disability insurance • 401(k) participation