Client Requests and Contract Reviews: Serve as a point of contact for client requests for information related to information security compliance. Must have deep understanding in this and provide detailed evidence-based responses.Review contracts and agreements to ensure compliance with information security requirements and standards.Attending client meetings and address their security concerns.
Third-Party Risk Management: Manage third-party risk assessment processes, including vendor security assessments and due diligence.Evaluate third-party security controls and assess their alignment with organizational policies and standards.
Exception Requests: Review and evaluate exception requests related to information security policies and standards.Assess the impact of proposed exceptions and make recommendations to management for approval or mitigation.
Business Resilience Conduct business impact ...
Ready to Apply?
Submit your application for Information Security Analyst at ERM