Third Party Risk Consultant

Reporting to: Head of Cyber Governance, Risk & Compliance
Department name: Enterprise Cyber Security 
Location: Romania (Bucharest or Cluj-Napoca)

Responsibilities

•    Perform cyber security due diligence of new suppliers and performance of on-going due diligence for existing supplier relationships.
•    Hold and drive internal and external discussions with business partners regarding third-party cyber security requirements.  
•    Communicate results and findings of third-party assessments in a clear and professional manner with all levels of the organization, in addition to external business partners.
•    Evaluate third-party threats, vulnerabilities, and control weaknesses to determine applicability and significance, and recommend mitigation.
•    Work with cyber team lead to understand control requirements to enforce and determine cyber security risks of third parties.
•    Monitor for third-party cyber incidents and manage responses and mitigations when they occur.

Requirements

•    Ability to read, understand, and perform due diligence of vendors by analyzing and reviewing cyber security controls and documentation provided, such as SOC 2’s, written information security programs, industry certifications, and network penetration testing results.
•    Experience with vulnerability management, incident management
•    Demonstrated experience as a trusted advisor and partner.
•    Excellent analytical and problem-solving skills, including ability to create and adapt to unconventional controls.
•    Broad understanding of cyber security practices for third party risks including software, cloud, SaaS.
•    Experience with the review of cyber security contractual agreements and amendments, applying risk-driven techniques.
•    Familiarity with managing your workload using a Jira Kanban board.
•    Software security lifecycle and vulnerability management experience including familiarity with threat modeling, static code analysis, dynamic scanning, and penetration testing.
•    Strong communication and advocacy skills, both verbal and written, with the ability to express complex and technical issues in clear and concise business terms. 
•    Strong project management skills with the ability to manage multiple priorities.
•    Working with and executing proficiently in industry known GRC tools.

Who We Are – MassMutual Romania
MassMutual Romania is a technology partner of MassMutual, a leading financial services company in the U.S., with a more than 170-year legacy. Established in 2020, the Romanian company is building an in-house team passionate about technology and innovation. We have expertise in software development, data science, and a wide range of technologies. With offices in Bucharest and Cluj, and team members across the country, MassMutual Romania develops technological solutions that help MassMutual deepen its digital capabilities and accelerate its growth in a digital-first world.

#LI-PD1