Detailed Job Description:
- 10+ years' experience in the IT Vendor Risk assessment/or IT risk management related activities.
- CISA/CISSP/CRISC accreditation preferred.
- Understanding of the VRM practices, including different lifecycle phases of risk identification, treatment, mitigation, acceptance, remediation as well as inherent and residual risks.
- 6+ years experience conducting IT compliance assessments (Sarbanes-Oxley, PCI, etc.)
- Prior experience performing security reviews and Vendor Risk Assessments/Risk Assessments, and interaction with client and business owners.
- Good oral and written skills on a business level in Engli...