Location
New York - 225 Liberty Street, Suite 4301 (BP)
Business
At Brookfield Properties, our global network and relationships are here for our tenants and partners — wherever they are in the world. Where going to work never feels routine. We integrate commercial real estate with world-class shops, restaurants, and entertainment, creating spaces where work and play don’t just coexist, but thrive. If you’re ready to be a part of our team, we encourage you to apply.
Job Description
We Are Brookfield Properties:
We are seeking an IT Manager, Third-Party Risk to join the Brookfield Properties U.S. Office Division in New York, NY. In this role, you will play a key part in inspiring change and continual improvement. If you are committed to excellence and ready to contribute to a dynamic culture, we would love to meet you.
The IT Manager, Third-Party Risk will join our Information Security team. Reporting directly to the Director of IT GRC, this pivotal role will oversee the operational and strategic aspects of our third-party cyber risk program. We seek a self-driven leader with a passion for process improvement and the ability to serve as a subject matter expert in vendor and compliance risk management.
Role & Responsibilities:
Independently conduct thorough third-party information security risk assessments, due diligence, and ongoing oversight of third-party services to ensure compliance and security
Collaborate with third parties and internal partners to develop and implement corrective action plans, mitigating and resolving third-party risks effectively
Play a vital role in shaping the department's overall strategy, processes, and approaches, demonstrating strong expertise in cybersecurity and compliance
Collaborate seamlessly with leadership, multiple internal organizations, external parties, legal, compliance, IT, and business units to leverage relationships, address priority issues, proactively identify, and promptly mitigate risks associated with third-party engagements
Drive process innovation, including activities like automation, and lead initiatives to enhance the efficiency, effectiveness, and operational capabilities of the third-party risk management program
Establish and maintain a comprehensive third-party risk register to address potential vulnerabilities across significant risk areas
Review contractual agreements to ensure proper provisions are included to protect company data in third-party engagements
Administer program procedures, tools, and related support materials to maintain consistent and effective risk management practices
Your Qualifications:
Bachelor's degree in Business, Computer Science, Information Technology, or related field. Related certifications (e.g., CISA, CISSP, CRISC) will be helpful
7+ years of combined IT and experience in third-party risk management in a global company
Professional information security experience, including conducting comprehensive third-party risk assessments
Act as a subject matter expert on third-party risk management, providing guidance and training to internal stakeholders
Strong knowledge in understanding and ability to review and analyze SOC reports
Strong knowledge of industry standards and regulations, including ISO 27001, NIST, GDPR, PCI, SOX, and other data/privacy regulations and standards
Strong understanding and practical experience in implementing risk management frameworks. This includes a comprehensive grasp of the risk management cycle, covering areas such as vulnerabilities, threats, and controls, enabling practical evaluation and mitigation of third-party risks
Extensive knowledge of data security, access control systems, and related matters
Ability to deliver regular reports and updates to senior management on the status of third-party risk management efforts, including establishing KPIs and metrics to gauge program effectiveness
Detail-oriented with excellent analytical, problem-solving, and organizational skills, coupled with strong communication abilities (both written and verbal)
Proven ability to work independently and in a team environment
Ability to coordinate and perform multiple tasks/projects simultaneously, balancing priorities and deliverables
Experience with the OneTrust third-party risk management module is a plus
Knowledge of PowerBI is a plus
Additionally, may be required to perform other duties as assigned
Compensation:
Salary Type: Non-exempt
Pay Frequency: Bi-weekly
Annual Base Salary Range: $105,000-$135,000
We are proud to create a diverse environment and are proud to be an equal opportunity employer. We are grateful for your interest in this position, however, only candidates selected for pre-screening will be contacted.
#BPUS
