Third Party Information Security Evaluation Specialist

Summary:

Position will be a member of the Third Party Cyber Security Specialized Subcategory Cyber Assurance Program (TPSSCAp) organization in Global Information Security (GIS), responsible for conducting information security assessments of third parties by reviewing independent audit reports (e.g., SOC 2 Type 2, ISO 27001, PCI DSS RoC) or Self Attestation / Assessment reports (e.g., SIG, PCI DSS AoC) to document a point of view on the information security posture of the third party. The position will be a key player in driving strategic initiatives focused on the design of Third Party Specialized Subcategory Cyber Assurance (TPSSCA) program requirements, governance routines, consequence processes, and third party risk metrics and reporting. In addition to supporting strategic initiatives, the position will include analyzing and interpreting diverse information security risk indicators to deliver actionable insights into third party information security risk and enable prioritized cyber security assurance approaches. Position requires interaction with the third party cyber assessment team, technical subject matter experts, GIS Policy, and the internal and external third party management community.