Vendor Risk Specialist Cyber & BCP - LisbonCountry: PortugalVendor Risk Assessment Center is looking for a VENDOR RISK SPECIALIST in CYBER & BCP based in our LISBON (Portugal) office.
WHY YOU SHOULD CONSIDER THIS OPPORTUNITY
At Santander () we are key players in the transformation of the financial sector. Do you want to join us?
At Aquanima we provide a valuable service to our customers. We are part of the Santander Group and we seek to achieve maximum efficiency for the Group and for external clients, through the management of purchasing processes. As our ultimate and main objective is to maximize savings for our clients, we offer our expertise in purchasing in various expense categories in the countries where we have a presence. In addition, our capabilities allow us to offer other value-added services such as º supplier management and contract management. We are a strategic partner to our customers and suppliers, creating long-term relationships with them and helping them to achieve greater efficiency in their day-to-day operations.
Santander is proud of being an organization where there are equal opportunities regardless of gender identity, culture and disability. Our mission is to contribute to help more people and business prosper. We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.
WHAT YOU WILL BE DOING
As a Vendor Risk Specialist in Cybersecurity & BCP, you will be responsible for certifying and managing Vendors regarding Cyber and Contingency risks.
1. Review and challenge of inherent risk scoring of critical services.
2. Certificate critical services / vendors, establish and monitor remediation plans, and issue a residual risk rating.
3. Reporting and collaboration with local CISO and Business Continuity team regarding risk assessment results, continuous improvement of risk methodology, etc.
4. Periodic reporting to local Cost / Risk areas and respective committees.
We need someone like you to help us in different fronts:
5. Reporting of VRAC activity metrics, risk assessment results, remediation plans, and presentations to the local Cost / Risk areas and respective Committees.
6. Follow up of the ongoing certification process, including remediation plans.
7. Collaboration in third party risk analysis processes between suppliers and risk analysts.
8. Review and challenge of inherent risk scoring of critical services.
EXPERIENCE
9. - years of experience working in in Cybersecurity / IT Risk / IT audit / Business Continuity areas.
EDUCATION
10. Degree in Business Administration and Management, Engineering or similar.
SKILLS & KNOWLEDGE
11. Knowledge of information technology and security certifications, standards and frameworks such as ISAE | SOC, NIST CSF, ISO/IEC, ISO, COBIT...
12. Knowledge of IT Audit practices, IT Risk Management, Business Continuity Management, Vulnerability Management, Security testing methodologies (OWASP, OSSTMM...).
13. Communication and oral expression fluent in Portuguese and English; Spanish desirable.
OTHER INFORMATION
14. A strong candidate will also be able to manage multiple tasks simultaneously and an enthusiastic team player.
15. Effective communication and excellent writing skills.
16. Capacity of working with different and diverse teams.
17. Keen attention to details and analytics skills are preferred.
18. Good handling people.
19. Problem-solving approach.
LI-FB