Be an early applicantLess than 25 applicants
myGwork - LGBTQ+ Business Community · 3 days ago
Third Party Risk Management Analyst
San Francisco, CA
Full-time
Onsite
Entry Level
$70K/yr - $128K/yr
1+ years exp
Wonder how qualified you are to the job?
Maximize your interview chancesInternet
Insider Connection @myGwork - LGBTQ+ Business Community
Responsibilities
Collaborate with internal teams to respond to security questionnaires and provide accurate, timely responses to customer inquiries.
Contribute to and maintain accurate inventory of information relating to the Information Security programs.
Execute, monitor, and refine multiple processes from new customer engagements to application review and interpreting new legislation as it relates to company exposure.
Work cross functionally, touching parts of business teams, legal, privacy, engineering, and many more.
Assist implementation of a structured and standardized approach to evaluate potential vendors and service providers.
Coordinate the collection of necessary documentation, such as security certifications, audit reports, and compliance evidence.
Analyze the collected information to assess the overall risk profile of third parties.
Evaluate the security posture and GRC practices of third-party vendors and service providers.
Assist in negotiating contracts with third parties to incorporate appropriate security clauses and requirements.
Maintain up-to-date records of all third-party risk assessments and compliance status.
Support incident response efforts related to third-party incidents, breaches, or security events.
Contribute to the rollout and implementation of the new TPRM system and process automation.
Qualification
Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.
Required
1-2+ years of experience in Third Party Risk Management, Vendor Management, or experience in Governance, Risk Management and Compliance (GRC)
1-2+ years of experience in Information Security/Cybersecurity, or Network/System Administration
A track record in third-party risk management and vendor assessment processes
Familiarity of industry regulations and standards (e.g., GDPR, ISO 27001, NIST, SOC1/2 etc.)
Strong analytical and problem-solving skills with attention to detail
Excellent communication and interpersonal skills to collaborate effectively with various stakeholders
Certifications such as CISSP, CISA, CISM, or CRISC
Benefits
Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents
Retirement benefits such as a 401k plan and company match
Short and long-term disability coverage
Basic life insurance
Well-being benefits
Reimbursement for certain tuition expenses
Parental leave
Sick time of 1 hour per 30 hours worked
Vacation time for full-time employees up to 120 hours thru the first year and 160 hours thereafter
Around 13 paid holidays per year
Employee Stock Purchase Plan
Company
myGwork - LGBTQ+ Business Community
myGwork is the largest global platform for the LGBTQ+ business community.
11-50 employees
Funding
Current Stage
Early StageTotal Funding
$4.77MKey Investors
24 HaymarketInnovate UK
2023-08-17Series Unknown· $1.66M
2023-08-17Grant· Undisclosed
2021-12-07Series A· $2.12M
Leadership Team
Adrien Gaubert
Co-Founder & CMO
Recent News
2024-04-10
Company data provided by crunchbase
