Tell a Friend

Success Stories

From my very first contact with Recruit Arrow, through the application process, interviews, and my acceptance of the position, this service was an invaluable asset. My recruiter gave me insight into the company by sharing her own experiences and views.

READ MORE

Related Category Jobs:

JOB CENTER

Your Window to a World of Opportunities

Cyber Risk Senior Manager
Location : New York, New York City
Refer job # GKNP338218

Job Responsibilities and Requirements: Responsibilities include engagement planning, directing, and completion of third party impact and program assessments and design/implementation of third party policies and procedures; developing and supervising other Grant Thornton project teams; and leading client management and practice development activities. ESSENTIAL DUTIES AND RESPONSIBILITIES: Adhere to the highest degree of professional standards and strict client confidentiality. Support the execution of assigned client engagements from start to finish, which includes the engagement planning, directing, and completion of third party risk management assessments, and other third party related projects while managing those engagements to budget. Proficient knowledge of third-party risk management processes and methodologies Background with risk management and Third party standards and guidelines Proficient knowledge of regulatory requirements related to third party management (such as NY DFS Cybersecurity regulations) Assist clients in planning and executing remediation plans identified in assessment activities. Work with the client to plan an engagement strategy, define objectives, and address technology- related controls risks and issues. Proactively interact with key client management to gather information, resolve problems and make recommendations for improvements. Ability to manage multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment. Work closely with Grant Thornton senior managers and partners to promptly identify and resolve client problems or issues. Collaborate with team members at all levels in the development and marketing of the Third Party Risk Management service offering Additional duties as assigned QUALIFICATIONS: Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related field is required. Ten years of related work experience in a similar consulting practice or function, servicing cross- industry clients at a national level. Knowledge of developing and implementing cybersecurity, privacy, and IT risk strategies in the areas of operational cybersecurity, privacy and/or IT risk knowledge and other related areas in order to assist clients in assessing their posture and program improvement. Common cybersecurity, privacy or technology industry standards/ regulations (e.g. ISO 27001/27002, NIST 800 series, COBIT, PCI-DSS, ITIL, HIPAA / HITECH, Privacy Shield, GDPR, CANSPAM) especially as it relates to building a program and/or managing internal controls, risk assessments, business process and internal IT control testing or operational auditing. Experience working with technical, security controls and operational risk tolerance, conducting privacy and security risk and/or gap assessments and internal privacy audits, reviewing privacy practices, and preparing reports and other deliverables that contain strategy, project, or technical analysis and findings in connection with consulting engagements and communicating those results to the team and client. Certification(s) Preferred: Obtained or demonstrates an active pursuit of one or more of the following certifications: Information Systems Security Professional (CISSP), Certified Information Privacy Professional (CIPP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) certifications, or other related certifications. Knowledge of emerging technologies, such as cloud, Internet of Things (IoT) and advanced analytics, is a plus. Experience with GRC platform tools is a plus Experience with managing third party technology enablement projects is a plus Experience in project management and the ability to clearly communicate data protection and privacy issues verbally on both a formal and informal basis to all levels of client staff. Exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships. Ability to work additional hours as needed and travel on a regular basis to clients as required. Travel for this position can go as high as 60%.



[Apply Now] [Email to a Colleague] This particular job is currently not active. However, since our clients regularly share with us similar and other job openings, we strongly recommend that you submit your resume. We shall review your resume and get in touch with you as soon as a suitable vacancy comes up to further discuss your interest in exploring the opportunity.Assisting you is our highest priority. Please be assured that none of your materials will be forwarded to any employer without your consent. Of course, all inquiries are kept strictly confidential.

Newsletter and Job Updates