Randstadeos
Specialist – Third Party Product Security Testing & Certification
Responsibilities Include:
Executing third-party product security assessments, identifying issues that needs appropriate risk treatment, and reporting them to the senior ATS stakeholders.
Partnering with TPPS&C leadership to help them recommend and enforce approved Technology Standards for use across the enterprise.
Supporting the development / enhancement of processes / tooling that helps better identify / record / address the risks related to third-party product usage.
Suggest ways to enhance the review process for better effectiveness and efficiency.
Required skills:
5 years minimum experience in third-party risk management or risk consulting out of which, at least 3 years in assessing / testing of third-party applications security.
Good understanding of various third-party risk management frameworks and standards.
Good exposure to regulatory requirements in other industries.
Awareness of known vulnerabilities, security features, and expected controls for leading ERPs like Oracle EBS, Fusion, Hyperion SAP etc., and / or other third-party applications like Salesforce, Workday etc.
Proven project management skills
Desirable skills:
Bachelor's or master's degree in computer science, Mathematics, Information Systems, Engineering, Commerce or Cyber Security.
Prior experience with Telecom sector.
ISACA, ISC2 or other relevant certifications.