Third Party Cyber Risk Assessor

at  Bank of America

ROLE DESCRIPTION:

In this role, you’ll conduct security reviews of third-party vendors, including pre-assessment, assessment, and remediation activities. Your work directly supports our commitment to safeguarding the Banks’ services. This role requires travel at least 50% of time. Applicants must be eligible to travel within EMEA.

RESPONSIBILITIES

• As a Third-Party Cyber Risk Assessor, you’ll play a crucial role in ensuring the security of our third-party vendors. Your responsibilities will include:
• Validating assessment scope.
• Partnering with vendor managers and third parties to answer detailed
• questions.
• Preparing them for assessment.
• Collecting and reviewing documentation.
• Evaluate a third party’s information security risk with a holistic lens.
• Identifying and discussing any information security gaps in the service provider’s program with the third party.
• Determining if appropriate information security controls are in place.
• Escalating security issues or risks identified during the assessment.
• Completing assessment work papers.
• Produce assessment summary reports detailing the gaps identified and the potential impact and recommendations for mitigating the risk.