Third Party Cyber Risk Analyst - Officer

Responsibilities

• Perform thorough cyber and information security assessments of third-party service providers using established risk management frameworks.
• Review and analyze third-party attestation and certification artifacts, including SOC2, SIG, NIST, and ISO 27001/2, to identify potential security risks.
• Document assessment results in alignment with enterprise risk management and issue management standards.
• Provide subject matter expertise and timely recommendations to address identified information security problems.

Requirements

• 10 years of experience in Cyber/Information Security, Third Party Cyber Risk Assessment, or related fields.
• Deep knowledge of security frameworks and regulations such as ISO 27001/27002, NIST, GDPR, and DORA.
• Expertise in writing technical and risk management reports.
• Superior attention to detail with excellent verbal and written communication skills.

Preferred Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Law, Privacy, or Enterprise/Operational Risk Management.
• Professional certifications such as CISA, CISM, CISSP, or SECURITY+.
• Demonstrated ability to communicate complex cyber security issues to both technical and non-technical audiences.

About the Company

State Street is a leading global provider of financial services to institutional investors. We help our clients manage risk, respond to challenges, and drive performance. We are committed to fostering an inclusive environment where employees are empowered to reach their full potential.