Job Information
Insight Global Global Cybersecurity Risk Analyst in Northbrook, Illinois
Job Description
Our client is looking for a Global Cybersecurity Analyst to join their team. This resource will be responsible for identifying, analyzing, reporting, and influencing the management of information risks across the organization. The candidate will also be accountable for helping ensure that his or her organization's vendor ecosystem is properly evaluated, assessed, and managed to minimize risk exposure and risk impacts to the business. Responsibilities will include: identifying, monitoring, and mitigating risks associated with operational and third-party providers. Vendor risk management will include a vendor's information security practices and government, legal and industry compliance. They will also compile data and complete documentation related to operational and third-party risks, as well as help to ensure that the issues that arise are appropriately captured, assessed, and mitigated.
Duties:
* Assist with focused information risk assessments of existing or new services and technologies, along with business counterparts.
* Communicates risk assessment findings to team owners and custodians of information risk "business partners," or information governance teams and information security teams.
* Provides consultative advice to information governance or security teams that enables them to suggest informed risk management decisions.
* Helps to identify and facilitate the implementation of appropriate controls to effectively manage information risks as needed.
* Helping to identify opportunities to improve risk posture, developing solutions for remediating or mitigating risks and assessing the residual risk.
* Able to coordinate other risk management activities (e.g., Exception Management Process, Vulnerabilities Management, etc., with relevant stakeholders.
* Experience in coordinating and executing vendor risk management lifecycle (frameworks, policies, and processes), including performing detailed risk-based assessments and responding to external customers security assessments.
* Experience in reviewing contractual agreements' (Master Service Agreements) Cybersecurity requirements and making relevant inputs as required with key stakeholders (e.g., Legal,).
* Understands and applies relevant regulatory and legal compliance requirements
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .
To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .
Skills and Requirements
Must Haves:
* 2+ yrs in an information senior cybersecurity risk role
* 2+ yrs managing risk and compliance issues, or similar experience managing applications, projects or systems that require identification, evaluation, and remediation of risk
* Experience gathering and interpreting risks and associated impacts in the context of financial/operational concerns
* Strong knowledge of complex vendor risk-related issues through demonstrated experience managing vendor relationships, information security or regulatory compliance programs, and audits
* 4+ yrs with regulatory compliance and information security management frameworks
* International Organization for Standardization [IS0] 27000
* COBIT
* National Institute of Standards and Technology [NIST] 800)
* BS or MA in Business, Computer Science, Information Security, or a related field * Certified Information Systems Security Professional (CISSP)
* Certified Information Security Manager (CISM)
* Certified Information Systems Auditor (CISA) null
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion,sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military oruniformed service member status, or any other status or characteristic protected by applicable laws, regulations, andordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.