Add office photos
All Filters
200 Resy Jobs
Information Security Manager
Resy
posted 5d ago
Job Role Insights
Key skills for the job
Job Description
The Information Security Manager role is part of the third-party security team within Technology R isk & Information Security (TRIS) , and is responsible for security control enforcement, awareness , and enablement of American Express standard controls at 3 rd party environment .
This position, reporting to the Director of Information Security , is responsible for assessing the information security risk associated with Third Parties and facilitating and/or performing information security assessments of those Third Parties . The person in this position will be responsible for managing third party security risk specifically focused on aspects of assessing, monitoring, providing risk expertise on security control domains, process uplift recommendations, and providing professional guidance to key stakeholders of the program on information security aspects .
The ideal candidate for this role has an extensive background in risk management / Audit / Information Security. They are dynamic, with the ability to manage a fluctuating workload with competing deadlines. The candidate is highly inquisitive with a healthy dose of cautiousness , has a broad-based perspective and thrives on building a network of internal and external alliances. S/he has highly developed communication skills, excellent time management and an acute attention to detail
Responsibilities:
Responsibilities:
- Partner with the BU to complete third party risk assessments and ensure adherence to program requirements .
- Assist with risk analysis and security posture evaluations of Third Parties to support security assessment activitie s , including vulnerability threat assessments
- Execute or f acilitate execution of information security assessments for in-scope third parties , assess the quality of assessments conducted by External A ssessors, define risk ratings as appropriate to the control failures, etc.
- Review and evaluate the security controls of third-party vendors to ensure they align with the AXP s security standards and explains control requirements to the business colleagues and third parties, as appropriate
- Partner with other colleagues in third party security team in sharing inputs towards third party assessment questionnaires and Guidance documents
- Conduct training and awareness sessions for internal stakeholders on third-party security risks and best practices . Be an Information Security Risk Expert for team and other stakeholders
- Foster strong relationships with Business colleagues and TLM team to promote security best practices and collaboration
- S upport with security and compliance initiatives as led by third party security team
Requirements / Qualification :
- Thorough knowledge of information security components, principles, practices, and procedures
- Information security specialist with 8 + years of experience
- A broad understanding of the IT controls and best practices across key risk domains, including risk assessment methodology , application security, network and infrastructure security, Data loss prevention, and incident management is recommended
- Prior experience managing risk assessments; including background in audit, information security , Third Party Risk/Oversight, or other risk control functions
- Strong knowledge of information security frameworks (e.g., NIST, ISO 27001) and regulatory requirements
- Proficiency in risk assessment methodologies and third-party risk management tools
- Attention to Detail: Careful evaluation of vendor security practices and documentation
- Excellent communication, negotiation, and stakeholder management skills , able to effectively communicate at all levels within the organization
- Being flexible and able to adjust to new needs and new technologies , and be comfortable with ambiguity
- Strategic Thinking: Ability to align third-party security with broader organizational objectives
- Relevant certifications such as CISSP, CISM, CISA, CRISC , ISO 27001 are preferred
Compliance Language
Benefits include:
- Competitive base salaries
- Bonus incentives
- Support for financial-well-being and retirement
- Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
- Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
- Generous paid parental leave policies (depending on your location)
- Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
- Free and confidential counseling support through our Healthy Minds program
- Career development and training opportunities
Benefits include:
- Competitive base salaries
- Bonus incentives
- Support for financial-well-being and retirement
- Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
- Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
- Generous paid parental leave policies (depending on your location)
- Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
- Free and confidential counseling support through our Healthy Minds program
- Career development and training opportunities
Employment Type: Full Time, Permanent
Read full job descriptionCompare Resy with
TCS
Compare
Accenture
Compare
Wipro
Compare
Cognizant
Compare
Capgemini
Compare
HDFC Bank
Compare
ICICI Bank
Compare
Infosys
Compare
HCLTech
Compare
Tech Mahindra
Compare
Genpact
Compare
Teleperformance
Compare
Concentrix Corporation
Compare
Axis Bank
Compare
Amazon
Compare
Jio
Compare
Reliance Retail
Compare
IBM
Compare
iEnergizer
Compare
LTIMindtree
Compare
Share an Interview