Job Title: Security Specialist

Location: Pittsburgh, PA, Strongsville, OH, Birmingham, AL, Dallas, TX, Cleveland, OH – Hybrid (1 days a week in office)

Duration: 06 Months Contract

Only on W2

Working Hours (Flexible): M-F (8-5 pm) –Flexible

Job description:

Describe the function of your group within the bank and how that impacts CLIENT on a larger scale:

You will be part of a diversified financial services firm that reflects the needs, values and goals of our customers, employees, communities and shareholders. You will be instrumental in helping to maintain Client’s reputation for excellence in protecting customer and business information assets. As a Security Specialist within the Third Party Security Assurance (TPSA) team, you will be a member of Client’s Policy, Governance, and Assessments department that is part of Client’s overall Enterprise Information Security organization.

About Team:

Approximate 15 members meeting 2x weekly: 1hr on Monday and 1/2hr on Fridays (meets as needed otherwise)

Key Responsibilities:

The Security Specialist in this role is primarily responsible for conducting third-party security risk assessments across the Client portfolio of technology suppliers. The role will require extensive coordination with internal third-party resources as well as with the external suppliers. In this role, you will work with third party suppliers to validate that necessary security and technology controls are in place and operationally solid. Specific responsibilities within this position will include:

• Independently manage multiple assessments to completion within SLA. Assessment management includes reviewing returned Due Diligence Questionnaires, creating unique agendas for remote interviews based on controls that need further assessment, conducting remote assessment interviews, creating remediations, etc.
• Elevate issues, delays, obstacles as needed to keep the assessment lifecycle on track.
• Consult on defining third party security policies and best practices.
• Educate and build awareness of third-party security requirements.
• Continuously work to improve the overall third-party security assurance program.
• Assist with testing releases of the CLIENT TPSA platform.
• Special projects as assigned.

Must have technical skills/experience (ask for alternative/tool/version) :

• Must have a solid understanding of security concepts and controls and industry frameworks including NIST, FFIEC, and CRI Profile.
• Strong understanding of mitigation methodologies and regulatory requirements pertaining to information security, privacy, and/or data security.
• Experience with supporting toolsets including SharePoint, Jira, Confluence, and Tableau.

Nice to have:

• Proficiency using Third Party platforms including Archer and/or KY3P.
• Experience working in Third Party Risk Management preferred.

Soft Skills:

• Excellent project management skills, with the ability to work within deadlines, and flexibility to manage multiple competing priorities.
• Ability to work independently with little direction and/or supervision.
• Superior communication skills with the ability to ask questions, escalate roadblocks early, and interact effectively at multiple levels in the organization.
• Analytical aptitude with an emphasis on investigative, methodical critical questioning and logical thinking.
• High-level interpersonal skills.

Degrees or certifications:

Bachelor's Degree and at least 3 years of directly related experience

CCSK, CCAK, CRISC, CISSP Certification(s) -- Preferred

Interview process :

2 RNDs

1 HM -- 1/2 hr.

2 Panel - 1hr.