Senior Third-Party Cyber Risk Management Analyst

4 dni temu

Warszawa, Mazovia, Polska Alimentation Couche-Tard inc. Pełny etat

Job Description

Circle K Business Centre is a shared service center which supports Circle K Europe operations through a wide range of services within Finance & Control, Information Technologies, Human Resources, Transport Fuel and Customer Service.

Circle K is part of the Canadian company Alimentation Couche Tard Inc. (Couche-Tard), one of the world's largest joint-stock convenience retail companies, listed on the Toronto Stock Exchange (TSE). It has operations in North America, Europe, Asia and the Middle East. It has approximately 12,300 sites across its network in North America (U.S. and Canada), Europe (Norway, Sweden, Denmark, Ireland, Poland, the Baltics), Asia and the Middle East. We are a family of more than 100,000 merchants making it easy for our customers around the world.

The Third Party Cyber Risk Management (TPCRM) team is recruiting a senior third-party cyber risk analyst who will serve as a subject matter expert. This role provides subject matter expertise, managing, and performing key functions necessary to satisfy the Third-Party Cyber Risk Management program, including program projects and strategic initiatives. This role is accountable and responsible for providing expert risk analysis and information to business and risk management leadership. Additionally, the analyst establishes rapport with the business to support the company's overall IT and security governance, risk management, and compliance program with third-party vendors. The role supports implementing and maintaining our third-party platform and policies and a comprehensive control framework with enterprise-wide third-party risk management. Provides expert guidance to department management and business lines to ensure compliance and mitigation of risks. Contributes to objectives that support department strategic goals. This position reports to the third-party cybersecurity management senior manager.

Key Responsibilities:
  • Develops and maintains strong working relationships with business areas throughout the enterprise. Advises business lines and IT team on security requirements and best practices.
  • Build and foster a strong rapport and relationships across the enterprise to collaborate with key stakeholders, including Procurement, Legal, Physical and Cybersecurity, Compliance, Privacy, Technology, and other business functions to identify, assess, and design plans to mitigate and monitor risks associated with third parties.
  • Perform in-depth risk domain and cybersecurity risk assessments; assess the overall security stance of third-party entities; detect vulnerabilities and areas of noncompliance; and develop mitigation strategies aligned to industry standards.
  • Leverage intelligence, industry best practices (NIST, ISO, etc.), and the regulatory landscape (such as GDPR, SOX, etc.) to ensure a rounded assessment of the risk posed to the organization.
  • Create and present detailed, high-quality risk reports, clearly articulating risk findings with recommendations, and maintain a comprehensive risk assessment and related documentation inventory.
  • Coordinate third-party risk management activities, including communicating with vendors about cybersecurity zero-day vulnerabilities.
  • Key participant in strategic planning activities, cybersecurity projects, or District or System priorities, including workgroups and initiatives as requested.
  • Collaborates, as appropriate, with Enterprise Risk Management, Legal, Procurement, and other risk functions to maintain an Enterprise Third Party Risk Management Program.
  • Key participant in developing and enhancing processes and procedures for the Third Party Cyber Risk Management program, including due diligence activities, continuous monitoring, and frameworks to enhance the efficiency and effectiveness of the overall program.
  • Understanding business needs and dedicated to delivering high-quality, prompt, and efficient service.
  • Knowledge of relevant regulations, standards, and frameworks related to third-party risk management, such as NIST 800-53, NIST CSF, NIST RMF, SOX, GDPR, and other industry-specific frameworks.
  • Must be a self-starter and comfortable operating independently and be able to navigate with autonomy; provide updates on progress, re-confirm priorities, be flexible, and seek to clarity/help in the event of roadblocks.
Position Requirements:
  • Bachelor's Degree
  • 3-5 years of work experience related to Third Party Risk Management, supplier risk management, vendor risk management, and/or cyber risk management.
  • Strong knowledge of information security concepts and controls (including AI and Cloud Environments)
  • Understanding of regulatory requirements pertaining to information security, privacy, and/or data security
  • Ability to consult with customers in a service advisory capacity
  • Self-driven; able to manage schedules, meet deadlines, coordinate with others, perform tasks, and work independently with minimal supervision
  • Strong project management skills, with the ability to work with multiple customers, deadlines, and priorities
  • Organized and effective with time and meeting management
  • Strong interpersonal and communication skills with the ability to ask questions, actively listen, escalate roadblocks, and interact effectively at multiple levels
  • Strong analytic skills and attention to detail
  • Preferred Certifications: CTPRP, CISSP, CRISC, CISM, CISA
What do we offer?
  • Contract of employment
  • Annual bonus
  • Private medical care
  • Possibility for author's tax deduction
  • Cafeteria Platform/Multisport
  • English lessons subsidized by the company
  • Group insurance
  • Attractive discounts for products and services at our stations
  • Employee stock purchase plan
  • Employee Assistance Program (Lyra)
  • Modern and convenient office that you can virtually visit here - https://goo.gl/maps/CLteHfYcdYMbdESq6
  • Trainings & possibility to develop skills in a wide international environment

When working with us you can depend upon it that you will not be judged on the grounds of race, national origin, gender, sexual orientation, disability, age, or other legally protected status. Oppositely – we believe that our diverse and inclusive culture helps us create an amazing atmosphere where everybody feels welcome.

Check who we are here: https://youtu.be/td-QGnNnvW0

Want to know even more about us? Take a look at our career page: https://workwithus.circlek.com/global/en/businesscentrewarsaw

Interested?
We encourage you to apply.

We know great companies are built from within, by great people like you. Come grow with us

We´re looking forward to your application.

We hereby inform that in the company Circle K Business Centre Poland sp. z o.o. with registered office in Warsaw an Internal Notification and Follow-up Actions Procedures applies.

The document describes rules for reporting violations of law by whistleblowers. Full content of the above-mentioned Procedure is available here: https://www.circlek.pl/o-nas/procedury-zgloszen

#J-18808-Ljbffr

  • Senior Third-Party Cyber Risk Management Analyst

    1 dzień temu

    Warszawa, Mazovia, Polska TN Poland Pełny etat

    Social network you want to login/join with:Senior Third-Party Cyber Risk Management Analyst, WarsawClient: Circle KLocation: Warsaw, PolandJob Category: OtherEU work permit required: YesJob Reference:8f15f5d539c2Job Views:3Posted:15.03.2025Expiry Date:29.04.2025Job Description:Circle K Business Centre is a shared service center which supports Circle K Europe...

  • Third Party Risk Analyst – Cybersecurity

    2 godzin temu

    Warszawa, Mazovia, Polska TN Poland Pełny etat

    Social network you want to login/join with:Third Party Risk Analyst – Cybersecurity, WarsawClient: Groupe SIILocation: Warsaw, PolandJob Category: OtherEU work permit required: YesJob Reference: 26d70eec20f6Job Views: 55Posted: 23.01.2025Expiry Date: 09.03.2025Job Description:Join one of the largest financial institutions as a Third Party Risk Analyst. The...

  • Third-Party Risk Analyst

    4 dni temu

    Warszawa, Mazovia, Polska Alimentation Couche-Tard inc. Pełny etat

    Alimentation Couche-Tard inc. is seeking a highly experienced Third-Party Risk Analyst to join our team. In this role, you will be responsible for performing in-depth risk domain and cybersecurity risk assessments, assessing the overall security stance of third-party entities, detecting vulnerabilities and areas of noncompliance, and developing mitigation...

  • Third-Party Risk Analyst

    23 godzin temu

    Warszawa, Mazovia, Polska TN Poland Pełny etat

    About the JobThird-Party Risk AnalystWe are seeking a highly skilled Third-Party Risk Analyst to join our team at TN Poland. In this role, you will be responsible for developing and maintaining strong relationships with business areas to advise on security requirements and best practices.Develops and maintains strong working relationships with business areas...

  • Third-Party Cybersecurity Assurance Lead

    4 dni temu

    Warszawa, Mazovia, Polska TN Poland Pełny etat

    The successful candidate for this Third-Party Cybersecurity Assurance Lead position will have 5+ years of experience in Technology, Technology Risk & Controls, Technology Audit, Cybersecurity, Application Security, Cloud Security (SaaS, PaaS & IaaS), Network, Security, Cyber Resiliency, and Third Party Outsourcing Risk Management within a large...

  • Risk Management Expert

    5 dni temu

    Warszawa, Mazovia, Polska Standard Chartered Pełny etat

    About the OpportunityAs a highly experienced Risk Management Expert - Third Party Governance, you will play a key role in maintaining our Third Party Governance Framework, ensuring adherence to relevant Country laws and regulations, and contributing to continuous process improvements and tool enhancements.This is an exciting opportunity to join our Central...

  • Third Party Risk Governance Specialist

    3 dni temu

    Warszawa, Mazovia, Polska Standard Chartered Pełny etat

    Job SummaryWe are seeking a seasoned Third Party Risk Governance Specialist to join our Central Outsourcing Management Team in the 2nd Line of Defence. This individual will execute operative tasks and support the Team lead, the Central Outsourcing Control Officer, in fulfilling requirements related to country laws and regulations as well as adhering to...

  • Third Party Management Expert

    3 dni temu

    Warszawa, Mazovia, Polska Standard Chartered Life and Careers Pełny etat

    Third Party Risk Governance Process ExpertAre you passionate about governance, risk management and compliance? Do you have experience in operational risk management?We are seeking a highly motivated Third Party Management Expert to join our Central Outsourcing Management Team in Frankfurt or Warsaw.The successful candidate will execute operative tasks and...

  • Third Party Risk Governance Process Specialist

    5 dni temu

    Warszawa, Mazovia, Polska Standard Chartered Pełny etat

    About the RoleWe are seeking a highly skilled Third Party Risk Governance Process Specialist to join our Central Outsourcing Management Team in Frankfurt or Warsaw.The successful candidate will execute operative tasks and support the Team lead, Central Outsourcing Control Officer, to fulfill requirements by relevant Country laws and regulations, and adhere...

  • Technology & Cyber Risk: Senior Analyst - Cybersecurity Risk

    1 dzień temu

    Warszawa, Mazovia, Polska TN Poland Pełny etat

    Social network you want to login/join with:Technology & Cyber Risk: Senior Analyst - Cybersecurity Risk, WarsawClient:11101 Citibank Europe plc PolandLocation:Warsaw, PolandJob Category:OtherEU work permit required:YesJob Reference:a92337ceb06bJob Views:20Posted:23.01.2025Expiry Date:09.03.2025Job Description:Come and join our newly established Cyber Risk...

  • Risk Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Bain & Company Pełny etat

    The roleThe Risk Analyst, Third Party Risk Management will report into a Senior Manager of the TPRM Execution team. The Analyst will be part of a teamlet responsible for the day-to-day execution of TPRM-related activities, and the development and maintenance of TPRM capabilities and will work in tandem with other risk analysts, as well as risk experts. The...

  • Third Party Risk Control Specialist

    19 godzin temu

    Warszawa, Mazovia, Polska Standard Chartered Pełny etat

    We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. Our Central Outsourcing Management Team is seeking a seasoned professional to join us as a Third Party Risk Governance Manager. In this role, you'll support the team lead...

  • Operational Risk Manager

    5 dni temu

    Warszawa, Mazovia, Polska Standard Chartered Pełny etat

    About the RoleWe're seeking a highly skilled Operational Risk Manager - Third Party Sourcing to join our Central Outsourcing Management Team in Frankfurt or Warsaw.The successful candidate will be responsible for identifying, assessing, and mitigating operational risks associated with third-party sourcing, ensuring adherence to relevant Country laws and...

  • Risk Management Specialist

    4 dni temu

    Warszawa, Mazovia, Polska Alimentation Couche-Tard inc. Pełny etat

    At Alimentation Couche-Tard inc., we are seeking a highly skilled Risk Management Specialist to join our team. As a key member of our organization, you will be responsible for managing and performing critical functions necessary to satisfy our Third-Party Cyber Risk Management program.The successful candidate will serve as a subject matter expert, providing...

  • Corporate Third Party Oversight Operations – Senior Associate/Associate

    1 dzień temu

    Warszawa, Mazovia, Polska TN Poland Pełny etat

    Social network you want to login/join with:Corporate Third Party Oversight Operations – Senior Associate/Associate (Legal Entity Broker), WarsawClient:Location: Warsaw, PolandJob Category: OtherEU work permit required: YesJob Reference: 548cd69f2ed1Job Views: 18Posted: 23.01.2025Expiry Date: 09.03.2025Job Description:If you enjoy partnering with contacts...

  • Governance and Compliance Officer

    5 dni temu

    Warszawa, Mazovia, Polska Standard Chartered Pełny etat

    About the JobWe're looking for a skilled Governance and Compliance Officer - Third Party Risks to join our Central Outsourcing Management Team in Frankfurt or Warsaw.The successful candidate will be responsible for maintaining our Third Party Governance Framework, ensuring adherence to relevant Country laws and regulations, and contributing to continuous...

  • Technology & Cyber Risk: Senior Analyst - Technology Risk

    1 dzień temu

    Warszawa, Mazovia, Polska TN Poland Pełny etat

    Social network you want to login/join with:Technology & Cyber Risk: Senior Analyst - Technology Risk, WarsawClient:11101 Citibank Europe plc PolandLocation:Warsaw, PolandJob Category:OtherEU work permit required:YesJob Reference:95271930957aJob Views:3Posted:15.03.2025Expiry Date:29.04.2025Job Description:Come and join our newly established Cyber Risk Team...

  • Operational Risk Analyst

    2 dni temu

    Warszawa, Mazovia, Polska Goldman Sachs Bank AG Pełny etat

    About the RoleAt Goldman Sachs Bank AG, we are seeking an experienced Operational Risk Analyst to join our GBM Regulatory Controls team. As an operational risk analyst, you will be responsible for executing daily responsibilities of GBM Regulatory Controls, including running internally developed controls and external third-party vendor controls.Key...

  • Cyber Security Expert

    4 dni temu

    Warszawa, Mazovia, Polska Alimentation Couche-Tard inc. Pełny etat

    We are looking for an exceptional Cyber Security Expert to join our team at Alimentation Couche-Tard inc. In this role, you will be responsible for developing and maintaining a comprehensive control framework with enterprise-wide third-party risk management.The ideal candidate will have a strong understanding of regulatory requirements pertaining to...

  • Cyber Risk Director

    2 godzin temu

    Warszawa, Mazovia, Polska TN Poland Pełny etat

    Are you looking for a career move that will put you at the heart of a global financial institution?By Joining Citi, you will become part of a global organisation whose mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress.Team/Role OverviewThe Technology and Cyber...