Third Party Risk Management

• Play a role in the delivery of GRC consultancy services, customer facing.
• Support customer to deliver IT Security Governance to attend Security Working Groups with customer.
• Develop risk management controls and systems
• Vendor Risk assessment
• Oversee and manage the GRC risk assessment and security exception process
• Evaluate moderate to complex business and technical requirements, and communicate inherent security risks and provide recommendations for mitigating controls to technical and non-technical stakeholders.
• Provide potential security related Service improvements.
• Review potential remediation options to address vulnerabilities discovered by scanning and provide input into recommendations.
• Support investigations into abnormal User activity as a result of a security investigation.
• Review changes to the ISMS proposed by customer and provide appropriate documented updates to the processes, roles and responsibilities.

Primary Skills:

• Must have experience in Cyber Security Risk, Compliance and Data privacy
• Understanding on ISO 27001:2013 Audit
• Third party risk management (TPRM)