DescriptionJoin our team to ensure a consistent and effective risk management program globally for third party-hosted applications.
As an Application Security Expert, in Corporate Third Party Oversight you will ensure consistent and effective end-to-end risk management program is in place globally for third party-hosted applications. You will influence internal and external stakeholders to inform and ultimately mitigate third party application risk across the firm.
Job Responsibilities
- Drive the transformation agenda, including business justification and program build out.
- Partner with internal risk teams to support business as usual risk activities, reporting and project initiatives.
- Ensure risk impacting the business is effectively identified, quantified, communicated and remediated
- Influence supplier adoption of the product vision, roadmap, and risk control objectives
- Operationalize the Third Party Software Bill of Materials (SBOM) program
Required qualifications, capabilities, and skills
- 5+ years of experience in Third Party Risk Management (TPRM) or Governance, Risk Management, and Compliance (GRC), Cybersecurity, Application Security, Cloud Security Architecture (SaaS, PaaS & IaaS) within a large enterprise level environment
- 3+ years of experience using a broad set of technologies (e.g., servers, operating systems, applications, databases, hypervisors, virtualization management, containers, compute, storage, etc.)
- Strong leadership skills, ability to multitask, sense of ownership, attention to detail and quality, and deliver on commitments
- Understanding of Secure Software Development Life Cycle (SSDLC) (e.g., coding requirements, risk assessments, threat modeling, static code analysis, and dynamic application scanning)
Preferred qualifications, capabilities, and skills
- Certification in Public Cloud Technology from major Cloud Service Provider
- Experience with Software Bill of Materials (SBOM)
- CISSP, CISA, CISM, CCSP or CRISC certification
