FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
IT Risk and Compliance Analyst
Greenberg Traurig, LLP. Lead the ongoing design, development, and management of the firm’s third-party risk management program .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in third-party risk management, including vendor risk assessments, compliance monitoring, and information security due diligence. Proficient in developing and implementing risk management policies and procedures while effectively communicating technical concepts to diverse stakeholders.
Highest-signal resume keywords
Third-Party Risk ManagementVendor Risk AssessmentsInformation Security Due DiligenceCloud TechnologiesIT Risk Management Processes
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Information Security ConceptsRisk Management PoliciesVendor Mitigation TrackingKPI DevelopmentInformation-Gathering ToolsIT AuditsCloud FundamentalsProject ManagementDocumentation SkillsBusiness Continuity Planning
Soft Skills
Analytical SkillsProblem-Solving SkillsInterpersonal SkillsWritten Communication SkillsVerbal Communication Skills
Tools & Technologies
ProcessUnityOneTrustUpGuardCyberGRXPrevalentArcherLogicManagerMicrosoft Office SuiteDDQSIG
Certifications & Qualifications
TPRACTPRPCEHCISACISM
Industry Keywords
Third-Party Risk Management ProgramVendor Information Security PostureRegulatory ComplianceSecurity Awareness ProgramsInsider Threat Programs
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud Platform
About the role
Key responsibilities & impact- Lead the ongoing design, development, and management of the firm’s third-party risk management program
- Complete vendor risk assessments submitted by clients and prospective clients
- Respond to client Requests for Proposals and security questionnaires
- Perform information security due diligence on third-party vendors
- Assess client needs against security concerns and resolve risk issues
- Develop, implement, assign, and monitor third-party vendor assessments
- Execute and document assessment activities according to established processes and procedures
- Perform third-party reviews of vendor information security posture and practices
- Monitor regulatory and compliance information to enhance the third-party due diligence program
- Provide subject matter expertise on third-party risk management and create or update documents and presentations for employees and auditors
- Continuously improve and automate the third-party risk management program
- Lead third-party risk threat notifications and assess vendor impact and response
- Track vendor mitigation progress for identified threats and risks
- Develop and monitor KPIs and KRIs for the third-party risk management program
- Develop and update third-party risk management policies, procedures, and best practices
- Participate in outside Third-Party Risk Management communities
- Work with the security team on the Firm’s Information Security Program, security awareness programs, and insider threat programs
- Identify Information Security and Business Continuity risks and recommend corrective actions and mitigations to senior management
- Assess third-party vendor BCP/DR compliance and communicate status and impact to the firm’s BCP/DR team
- Perform other related duties as assigned
- Report to the Technology Security Manager
Requirements
What you’ll need- Bachelor’s degree in information technology, Information Systems, Information Security, Business Administration, or Risk Management, or equivalent experience, or 3+ years of relevant information risk work experience in lieu of degree
- 1–3 years of experience implementing and/or supporting IT risk management processes
- 1–3 years of experience responding to vendor IT risk assessments
- Experience working with IT audits, findings, and tracking and remediating to resolution
- Understanding of information security concepts, IT, information security awareness, and third-party risk management processes, methodologies, and practices
- Working knowledge of cloud technologies, including Azure, AWS, Alibaba, GCP, or IBM Cloud, and SaaS, PaaS, and IaaS delivery models
- Working knowledge of security exchanges such as ProcessUnity, OneTrust, UpGuard, CyberGRX, Prevalent, Archer, and LogicManager
- Proficiency with standard information-gathering tools such as DDQ and SIG
- Proficiency with Windows-based software and Microsoft Office Suite
- Working knowledge of AI and cloud fundamentals
- Working knowledge of AI technologies, Gen AI, CoPilot, and ChatGPT
- Proficiency with Microsoft Office Suite
- Strong analytical, problem-solving, interpersonal, written, and verbal communication skills
- Basic project management and documentation skills
- Ability to explain technical concepts to non-technical stakeholders
- Ability to multitask and perform under pressure and tight deadlines
- Ability to maintain confidential, sensitive, and proprietary information
- Must be available outside normal working hours for emergency security incidents, breaches, and investigations
- Industry certifications such as TPRA, CTPRP, CTPRA, CEH, CISA, and CISM are preferred
- Candidates without preferred certifications are expected to work toward obtaining relevant certifications during employment
Benefits
Comp & perks- Competitive compensation
- Excellent benefits package
- Hybrid work arrangement
- Opportunity to work within an innovative and collaborative environment
- Opportunity to work toward obtaining relevant industry certifications during employment