Third Party IT Risk & Cyber Analyst Lisboa

Third Party IT Risk & Cyber Analyst
Lisboa
Lisboa, Lisboa, Portugal

Alter Solutions Portugal is an IT Consultancy Company, promoter of Digital Transformation, part of the Alter Solutions Group, created in 2006, in Paris.

In Portugal, we partner with over 120 clients and a team of over 500 people, working in projects for industries as diverse as banking, insurance, transportation, aviation, energy, and telecom.

Headquarters of the Nearshore IT center, Alter Solutions Portugal has a dedicated team of around 30 specialized professionals, integrated into projects with several internationally renowned clients.

Job Description

We are looking for someone with 2/3 years of experience in Third Party IT Risk & Cyber Security.

Main Responsibilities:

REINFORCE WM THIRD PARTY SECURITY FRAMEWORK

1. Ensure WM Third Party Security procedures are aligned with the company framework.
2. Prepare, coordinate and execute Third Party IT Risk & Security awareness.
3. Reinforce the governance with RISK Functions, Procurement and Outsourcing coordinators.
4. Contribute to the WM IT Risk & Cyber Security Committee.

CONTRIBUTE TO WM CYBER SECURITY PROGRAMS

1. Perform IT Risk & Cyber Risk Assessment of WM Internal or external IT Providers.
2. Contribute to the execution of the WM Third Party Security roadmap.
3. Record in WM Third Party Risk Management database all IT arrangements.
4. Define and implement action plan aiming to execute IT audit considering regulatory requirements.
5. Execute WM Third Party Controls.
6. Prepare, organize and execute Annual Third Party Monitoring campaign.
7. Execute Group IT Control Plan on Outsourcing, nearshoring & purchasing arrangements.
8. Perform control on IT Risk & Cybersecurity clauses in WM IT contracts.

DEPLOY GROUP TOOLS

1. Assess new BNPP IT Group Third Party IT Risk module.
2. Define and execute roadmap to deploy this module.
3. Create Third Party Security dashboard using for instance Power
   Bi solution.

Technical skills:

1. 2/3 years of experience.
2. Certification (not mandatory but strongly recommended): TPRA, ISO 27001, CISSP, CRISC, CISM, CISA.