ForgeRock is hiring a
Third Party Risk Analyst

Summary

The job is for a Third Party Risk Analyst at Ping Identity, where the employee will assess vendor and supplier risks, manage relationships, and improve the third party risk assessment process. The company culture emphasizes flexibility, collaboration, and diversity.

Requirements

• 3+ years of experience in a third party risk-based role in the information technology field
• Understanding of effective security controls at the systems, network, and application level and how to apply with cloud-based services
• Experience with security risk management frameworks
• Excellent communication skills (interpersonal and written)
• Knowledge of industry standard security control frameworks and guidelines

Responsibilities

• Perform regular, thorough risk assessments of new and existing vendors
• Maintain accurate and complete records of all vendor risk assessments and engagements
• Support the security audit function
• Support the security risk management function
• Help manage the vendor risk assessment platform, working with system owners to streamline the assessment process
• Collaborate with relevant stakeholders to drive continuous improvement of the end-to-end third party risk management process
• Own the relationships between security, stakeholders and business owners
• Define vendor and supplier assessment procedures and frameworks in accordance with corporate policy
• Evaluate vendor and supplier compliance with contractual, regulatory and compliance requirements

Preferred Qualifications

• A good understanding of industry standard security frameworks (ISO 27001, SOC 2 etc.)
• Relevant industry qualifications (e.g. CTPRP)

Benefits

• Generous PTO & Holiday Schedule
• Parental Leave
• Progressive Healthcare Options
• Retirement Programs
• Opportunity for Education Reimbursement
• Commuter Offset (Specific locations)