Senior Third-Party Cyber Risk Management Analyst

4 miesięcy temu

Warsaw, Polska Circle K Pełny etat
JOB DESCRIPTION

Job Description

Circle K Business Centre is a shared service center which supports Circle K Europe operations through a wide range of services within Finance & Control, Information Technologies, Human Resources, Transport Fuel and Customer Service.

Circle K is part of the Canadian company Alimentation Couche Tard Inc. (Couche-Tard), one of the world's largest joint-stock convenience retail companies, listed on the Toronto Stock Exchange (TSE). It has operations in North America, Europe, Asia and the Middle East. It has approximately 12,300 sites across its network in North America (. and Canada), Europe (Norway, Sweden, Denmark, Ireland, Poland, the Baltics), Asia and the Middle East. We are a family of more than 100,000 merchants making it easy for our customers around the world.

The Third Party Cyber Risk Management (TPCRM) team is recruiting a senior third-party cyber risk analyst who will serve as a subject matter expert. This role provides subject matter expertise, managing, and performing key functions necessary to satisfy the Third-Party Cyber Risk Management program, including program projects and strategic initiatives. This role is accountable and responsible for providing expert risk analysis and information to business and risk management leadership. Additionally, the analyst establishes rapport with the business to support the company's overall IT and security governance, risk management, and compliance program with third-party vendors. The role supports implementing and maintaining our third-party platform and policies and a comprehensive control framework with enterprise-wide third-party risk management. Provides expert guidance to department management and business lines to ensure compliance and mitigation of risks. Contributes to objectives that support department strategic goals. This position reports to the third-party cybersecurity management senior manager.

Key Responsibilities:

Develops and maintains strong working relationships with business areas throughout the enterprise. Advises business lines and IT team on security requirements and best practices.

Build and foster a strong rapport and relationships across the enterprise to collaborate with key stakeholders, including Procurement, Legal, Physical and Cybersecurity, Compliance, Privacy, Technology, and other business functions to identify, assess, and design plans to mitigate and monitor risks associated with third parties.

Perform in-depth risk domain and cybersecurity risk assessments; assess the overall security stance of third-party entities; detect vulnerabilities and areas of noncompliance; and develop mitigation strategies aligned to industry standards.

Leverage intelligence, industry best practices (NIST, ISO, , and the regulatory landscape (such as GDPR, SOX, to ensure a rounded assessment of the risk posed to the organization.

Create and present detailed, high-quality risk reports, clearly articulating risk findings with recommendations, and maintain a comprehensive risk assessment and related documentation inventory.

Coordinate third-party risk management activities, including communicating with vendors about cybersecurity zero-day vulnerabilities.

Key participant in strategic planning activities, cybersecurity projects, or District or System priorities, including workgroups and initiatives as requested.

Collaborates, as appropriate, with Enterprise Risk Management, Legal, Procurement, and other risk functions to maintain an Enterprise Third Party Risk Management Program

Key participant in developing and enhancing processes and procedures for the Third Party Cyber Risk Management program, including due diligence activities, continuous monitoring, and frameworks to enhance the efficiency and effectiveness of the overall program.

Understanding business needs and dedicated to delivering high-quality, prompt, and efficient service.

Knowledge of relevant regulations, standards, and frameworks related to third-party risk management, such as NIST 800-53, NIST CSF, NIST RMF, SOX, GDPR, and other industry-specific frameworks.

Must be a self-starter and comfortable operating independently and be able to navigate with autonomy; provide updates on progress, re-confirm priorities, be flexible, and seek to clarity/help in the event of roadblocks.

Position Requirements:

Bachelor's Degree

3-5 years of work experience related to Third Party Risk Management, supplier risk management, vendor risk management, and/or cyber risk management.

Strong knowledge of information security concepts and controls (including AI and Cloud Environments)

Understanding of regulatory requirements pertaining to information security, privacy, and/or data security

Ability to consult with customers in a service advisory capacity

Self-driven; able to manage schedules, meet deadlines, coordinate with others, perform tasks, and work independently with minimal supervision

Strong project management skills, with the ability to work with multiple customers, deadlines, and priorities

Organized and effective with time and meeting management

Strong interpersonal and communication skills with the ability to ask questions, actively listen, escalate roadblocks, and interact effectively at multiple levels

Strong analytic skills and attention to detail

Preferred Certifications: CTPRP, CISSP, CRISC, CISM,CISA

What do we offer?

Contract of employment

Annual bonus

Private medical care

Possibility for author's tax deduction

Cafeteria Platform/Multisport

English lessons subsidized by the company

Group insurance

Attractive discounts for products and services at our stations

Employee stock purchase plan

ICAS

Modern and convenient office that you can virtually visit here -

Trainings & possibility to develop skills in a wide international environment

No locations found

Save job

  • Senior Analyst

    3 tygodni temu

    Warsaw, Polska POL Fortrea Poland Sp z o.o. Pełny etat

    As a leading global contract research organization (CRO) with a passion for scientific rigor and decades of clinical development experience, Fortrea provides pharmaceutical, biotechnology, and medical device customers a wide range of clinical development, patient access, and technology solutions across more than 20 therapeutic areas. Conducting operations...

  • Technology & Cyber Risk: Senior Analyst - Cybersecurity Risk

    7 miesięcy temu

    Warsaw, Polska 11101 Citibank Europe plc Poland Pełny etat

    Come and join our newly established Cyber Risk Team in Warsaw! The Technology and Cyber Compliance and Operational Risk Office (TCCORO) at Citi is the firm’s reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational and compliance risks while...

  • Markets Tech

    6 miesięcy temu

    Warsaw, Polska 11101 Citibank Europe plc Poland Pełny etat

    Come and join our newly established Cyber Risk Team in Warsaw! The Technology and Cyber Compliance and Operational Risk Office (TCCORO) at Citi is the firm’s reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational and compliance risks while...

  • Senior Security Risk Analyst

    2 miesięcy temu

    Warsaw, Polska Snowflake Pełny etat

    Build the future of the AI Data Cloud. Join the Snowflake team. We’re at the forefront of the data revolution, committed to building the world’s greatest data and applications platform. Our ‘get it done’ culture allows everyone at Snowflake to have an equal opportunity to innovate on new ideas, create work with a lasting impact, and excel in a...

  • Technology & Cyber Risk: Senior Officer - Cybersecurity Risk

    6 miesięcy temu

    Warsaw, Polska 11101 Citibank Europe plc Poland Pełny etat

    Come and join our newly established Cyber Risk Team in Warsaw! The Technology and Cyber Compliance and Operational Risk Office (TCCORO) at Citi is the firm’s reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational and compliance risks while...

  • Corporate Third Party Oversight Operations – Senior Associate/Associate

    6 miesięcy temu

    Warsaw, Polska JPMorgan Chase & Co. Pełny etat

    If you enjoy partnering with contacts across the firm, building strong relationships with your colleagues and helping to move the business forward while helping comply to our regulatory commitments and associated policies, this could be the position for you. Corporate Third Party Oversight (CTPO) Legal Entity Broker is a centralized group within Global...

  • Technology & Cyber Risk: Senior Analyst - Technology Risk

    6 miesięcy temu

    Warsaw, Polska 11101 Citibank Europe plc Poland Pełny etat

    Come and join our newly established Cyber Risk Team in Warsaw! The Technology and Cyber Compliance and Operational Risk Office (TCCORO) at Citi is the firm’s reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational and compliance risks while...

  • Cyber Risk Director

    6 miesięcy temu

    Warsaw, Polska 11101 Citibank Europe plc Poland Pełny etat

    Are you looking for a career move that will put you at the heart of a global financial institution? By Joining Citi, you will become part of a global organisation whose mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress. Team/Role Overview The Technology and Cyber...

  • Technology & Cyber Risk: Senior Officer - Technology Risk

    6 miesięcy temu

    Warsaw, Polska 11101 Citibank Europe plc Poland Pełny etat

    Come and join our newly established Cyber Risk Team in Warsaw! The Technology and Cyber Compliance and Operational Risk Office (TCCORO) at Citi is the firm’s reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational and compliance risks while...

  • Third Party Oversight Broker

    6 miesięcy temu

    Warsaw, Polska JPMorgan Chase & Co. Pełny etat

    Are you passionate about ensuring compliance and monitoring Third party activities? Then this role is for you. As a Third Party Oversight Broker within the Third Party Oversight & Governance team, you will oversee all third-party activities to ensure adherence to our oversight standards. Your role will involve coordinating supplier engagements across all...

  • Senior Compliance Risk

    7 miesięcy temu

    Warsaw, Polska 11101 Citibank Europe plc Poland Pełny etat

    Come and join our newly established Cyber Risk Team in Warsaw! The Technology and Cyber Compliance and Operational Risk Office (TCCORO) at Citi is the firm’s reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational and compliance risks while...

  • Technology & Cyber Risk: Senior Officer - Compliance

    6 miesięcy temu

    Warsaw, Polska 11101 Citibank Europe plc Poland Pełny etat

    The Cyber Risk Officer is part of the Regulatory Change Management team within TCCORO which performs Regulatory Change Management and Regulatory Mapping activities. The role will be responsible for identifying, anticipating, challenging, and mitigating risks that could affect business objectives, and minimizing operational/compliance risk events and losses....

  • Supplier Cybersecurity Controls Assessor

    7 miesięcy temu

    Warsaw, Polska JPMorgan Chase & Co. Pełny etat

    You are passionate about Technology/ Cybersecurity and you understand industry risk frameworkrs, you found the right team. As a Supplier Cybersecurity Controls Assessor within the Supplier Assurance Services team, you will be responsible for conducting comprehensive risk assessments of suppliers as part of JPMorgan Chase & Co.'s Corporate Third Party...

  • Technology & Cyber Risk: Senior Officer - Risk Analytics & Regulation Reporting

    7 miesięcy temu

    Warsaw, Polska 11101 Citibank Europe plc Poland Pełny etat

    Come and join our newly established Cyber Risk Team in Warsaw! The Technology and Cyber Compliance and Operational Risk Office (TCCORO) at Citi is the firm’s reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational and compliance risks while...

  • Senior Quantitative Risk Model Analyst

    2 tygodni temu

    Warsaw, Polska Randstad Polska Pełny etat

    For a client in the banking industry, we are looking for a person to fill the position of Senior Quantitative RiskModel Analyst.oferujemyOur Client values stability of employment, therefore we offer you first B2B contract for a period of 12 months with the possibility of extension.Working in hybrid modelOpportunity for professional development in the...

  • Cyber Risk Analyst

    4 miesięcy temu

    Warsaw, Polska 1dea Pełny etat

    Dla jednego z naszych dużych klientów poszukujemy osoby do roli:Cyber Risk Analyst! Warunki zaangażowania: Lokalizacja: 100% zdalnieStart: ASAP (akceptujemy kandydatury z max 1msc okresem wypowiedzenia)Stawka (ustalana indywidualnie): 100 - 130 PLN net / hZaangażowanie: B2B (outsourcing z 1dea), full-time, długofalowoZakres obowiązkówOcena ryzyka:...

  • Cyber Security Analyst

    1 miesiąc temu

    Warsaw, Polska Biogen Pełny etat

    Job DescriptionAbout This Role:As a Cyber Security Analyst in the Security IT team, you will delve into the complex world of security data to uncover trends, patterns, and potential risks that inform our risk management and cyber defense strategies. Your analytical prowess will enable you to interpret incidents, vulnerabilities, and security assessments,...

  • Senior Quality Engineer

    4 tygodni temu

    Warsaw, Polska Ascensia Diabetes Care Pełny etat

    Ascensia Diabetes Care is a global specialist diabetes care company, dedicated to helping people living with diabetes. Our mission is to empower people living with diabetes through innovative solutions that simplify and improve their lives. We use our innovation and specialist expertise in diabetes to develop high quality solutions and tools that make a...

  • Senior Cyber Security Fraud Analyst

    4 miesięcy temu

    Warsaw, Polska Intuition Machines, Inc. Pełny etat

    Intuition Machines uses AI/ML to build enterprise security products. We apply our research to systems that serve hundreds of millions of people, with a team distributed around the world. You are probably familiar with our best-known product, the hCaptcha security suite. Our approach is simple: low overhead, small teams, and rapid iteration.As a Senior...

  • WordPress Developer

    2 tygodni temu

    Warsaw, Polska RISK Pełny etat

    Job DescriptionResponsibilities:- Improve existing themes and create new ones;- Develop custom themes and plugins for WordPress;- Integrate RESTful APIs and third-party services;- Set up and optimize databases (MySQL);- Optimize website loading speed (Google PageSpeed, Lighthouse);- Work with ACF;- Implement and maintain SEO optimization of websites...