Security Architect

Security Architect

Job Location: Plano, Texas Job duration: 12 months

Client is looking for:

• The client Cyber Risk Management Team is looking for a passionate and highly motivated Vendor Information Security person.
• The Cyber Risk Management team is part of the Information Security team responsible for protecting client information assets from unauthorized disclosure, accidental or intentional loss of data, and modification.
• This group works to proactively identify existing and emerging risks and threats and implement strategies and mitigations for them.
• This role specifically aids in that objective by working within the Cyber Risk and Third-Party Cyber Risk Management team to drive vendor and supplier security assurance throughout the phases of the supplier lifecycle to ensure vendors comply with client’s security policies and standards and that the supplier related security risks are identified and managed.
• This role interacts with many different business groups inside and outside of the company as well as with individuals at varying levels within client’s organization and client’s supplier organizations.
• This position is primarily responsible for performing contract reviews to ensure contracts have Security System requirements and Data handling requirements and provide guidance on security requirements, this position will work with Legal, Privacy, Vendor Management, procurement groups and business units.
• Secondary this person may be involved in all phases of the vendor security risk process, including assessments of supplier security posture, validation of supplier provided assessments (e.g., SOC2), documentation of review and findings, engagement of relevant groups to discuss and resolve findings, aiding the development of reasonable remediation plans, performing qualitative and quantitative risk analysis and preparing reports in understandable terms for senior leadership and involved individuals.

Candidates will be doing:

• Perform review of contracts and addendums for security requirements.
• Assisting with the negotiation of supplier contracts with respect to security requirements and articulating risk to supplier and business managers when suppliers are not agreeing to security terms.
• Provide guidance to the business relationship managers to ensure their understanding, support and acceptance of the risks involved in doing business with each supplier.
• Work with internal and external teams around security and supplier relationships.
• Assist with Risk and Vendor Security program initiatives working closely with the Information Security team and other business areas
• Understand the role of the security department and how it contributes to the overall goals and business strategy of the Company.