Job title: Risk Assessment Officer
Company: SCIENTE
Job description: Your Trusted Business Technology Partner in Intelligent Transformation and Specialised Technology Talent Management Services. Multi-award winning ISO9001:2015, Data Protection Trustmark (DPTM) & Great Place To Work certified organisation helps clients succeed in data engineering & data intelligence, AI-led intelligentization, insurance and financial services focused business technology consulting and Technology Talent Services for large conglomerates and MNCs. Our partners are: Databricks, AWS, Dataiku, Snowflake and Salesforce.The RoleJob SummaryWe are seeking a skilled and detail-oriented Third Party Risk Assessment Specialist who will be responsible for assessing, managing, and mitigating risks associated with third-party relationships to ensure that all external vendors, contractors, and service providers meet our organization’s security, regulatory, and compliance standards.Mandatory Skill-set
- Bachelor’s degree in Business, Risk Management, Information Security, Finance, or related field;
- 3+years of experience in third-party risk management, vendor management, compliance, or a related field;
- Knowledge of risk assessment methodologies and frameworks, such as NIST, ISO 27001, or similar;
- Familiarity with regulatory requirements and industry standards related to third-party relationships, such as GDPR, HIPAA, SOC 2, etc;
- Experience with conducting vendor risk assessments and audits;
- Strong communication skills, both written and verbal, with the ability to communicate complex risk-related issues to non-technical stakeholders;
- Detail-oriented, organized, and able to manage multiple projects simultaneously;
- Proficiency in Microsoft Office (Excel, Word, PowerPoint), risk management tools, and contract management systems.
Desired Skill-set
- Familiarity with cybersecurity best practices and data privacy laws;
- Experience with vendor management software or tools.
Responsibilities
- Risk Evaluation: Conduct risk assessments of third-party vendors and partners, focusing on areas such as data security, compliance, financial stability, operational effectiveness, and legal risk;
- Due Diligence: Perform thorough due diligence on potential third-party partners before engagement, including reviewing security protocols, business continuity plans, financial standing, and legal compliance;
- Ongoing Monitoring: Continuously monitor the performance and risk posture of third-party vendors throughout the life of the relationship. Identify new or evolving risks and recommend mitigating actions;
- Contract Review: Review and assess contracts, service level agreements (SLAs), and other documentation to ensure they meet company risk management standards and address potential risks;
- Risk Reporting: Prepare and present risk reports to senior management, highlighting identified risks, trends, and recommendations for mitigating actions;
- Compliance: Ensure that third-party vendors comply with all relevant regulations, including data protection laws (GDPR, CCPA), industry standards (ISO 27001), and organizational policies;
- Collaboration: Work closely with procurement, legal, IT, and compliance teams to integrate risk management processes into the vendor selection and management lifecycle;
- Incident Response: Collaborate with internal teams during any third-party-related incidents, helping to assess the impact and manage the response strategy;
- Risk Mitigation Strategy: Develop and implement strategies to mitigate risks related to third-party interactions, including conducting audits and ensuring vendors adhere to necessary corrective actions.
Ideal Profile
- You have at least 3 years experience including solid experience in a similar role within Financial Services.
- You have working knowledge of risk assessment, Audit and NIST
- You are a strong networker & relationship builder
- You are a strong team player who can manage multiple stakeholders
- You pay strong attention to detail and deliver work that is of a high standard
What’s on Offer?
- Join a well known brand within Insurance
- A role that offers a breadth of learning opportunities
- Fantastic work culture
Expected salary: 144000 per year
Location: Kuala Lumpur
Job date: Sun, 22 Dec 2024 06:37:54 GMT
To help us track our recruitment effort, please indicate in your email/cover letter where (jobsnear.pro) you saw this job posting.Thanks&Good Luck