Analyst, IT Security Vendor Risk Mgmt

hace 3 semanas


Ciudad de México Warner Bros. Discovery A tiempo completo

**_Every great story has a new beginning, and yours starts here._**

**_ Welcome to Warner Bros. Discoverythe stuff dreams are made of._**

**Who We Are **

When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the _storytellers_ bringing our characters to life, the_ creators_ bringing them to your living rooms and the _dreamers_ creating what’s next

From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.

**The Job**

**RISK ASSESSMENTS**
- Use WBD processes and tools to perform 3rd party vendor risk assessments, for new and existing vendors
- Work with business to understand the “what” and “how” of services provided by vendor to assess level of risk and scope of assessment
- Perform timely assessments of Vendor controls to identify, document, and communicate key deficiencies to the business and Information Security management
- Report on assessment outcomes, risk level and associated recommendations to remediate issues
- Assist with follow-up on documentation requests for initial and periodic assessments

**FINDINGS MANAGEMENT**
- Monitor corrective action plans against agreed upon timelines
- Review remediation evidence for closure of findings

**CONTRACT REVIEWS**
- Review contracts to ensure appropriate data security terms are included
- Provide comment and acceptable alternatives to vendor contract revisions, in alignment with defined guidance
- Escalate provision changes, as needed

**OTHER**
- Assist with contract intake to ensure pipeline of assessments is managed in a timely and efficient manner
- Provide periodic status updates
- Maintain accurate and complete data within the identified system of record
- Contribute to the team’s continuous improvement efforts by identifying opportunities and helping to implement them

**The Essentials**
- BS/BA degree required
- 3-5 years’ experience in information security, with at least one (1) year experience in third party risk management
- Knowledge of IP network infrastructure (firewalls, intrusion detection/prevention), access control, data encryption and physical security; Cloud security knowledge a plus
- Excellent communication skills, including the ability to communicate effectively in English, both written and verbal
- Ability to present complex topics in clear, non-technical language
- Ability to work collaboratively within team and across business and technology functions
- Detail-oriented individual with critical thinking, analytical, and problem-solving skills
- Demonstrated ability to be proactive and take ownership of and solve problems
- Active learner - able to enhance personal, professional, and business growth through new knowledge and experiences
- Ability to handle multiple assignments concurrently within an iterative environment

**The Nice to Haves**
- One or more of the following certifications: CISSP, CRISC, CISA
- 2+ years of prior experience in a related field (media, entertainment, business development or streaming services industry experience a plus)
- Familiarity with streaming and similar products/services
- Experience working in a national or global company

**How We Get Things Done**

**The Legal Bits



  • Ciudad de México Celanese International Corporation A tiempo completo

    Overview: **Responsibilities**: - Serve as the primary point of contact for all assigned IT vendors; - Continually challenge vendors to achieve exceptional levels of performance; - Execute IT vendor performance management framework that establishes performance metrics, tools for analyzing and reporting performance, and a constant end-to-end process for...

  • Sr. IT Vendor Specialist

    hace 17 horas


    Ciudad de México Celanese International Corporation A tiempo completo

    Descripción General: **Responsabilidades**: - Serve as the primary point of contact for all assigned IT vendors; - Continually challenge vendors to achieve exceptional levels of performance; - Execute IT vendor performance management framework that establishes performance metrics, tools for analyzing and reporting performance, and a constant end-to-end...

  • IT Security Lead

    hace 3 semanas


    Ciudad de México CHUBB A tiempo completo

    The Cybersecurity Manager is the primary technical security contact within their region for security risk analysis, gap identification, and mitigation/remediation activities. Engage with key stakeholders to ensure that processes and initiatives operate within the documented security org framework, monitor security policy/standards compliance, and...

  • Security Analyst

    hace 3 semanas


    Ciudad de México Precise Resource A tiempo completo

    Security Analyst Precise Resource, Inc. is a leading privately held Woman Business Enterprise specializing in Executive Search and head-hunting services for Fortune 500 clients across the United States. One of our more prestigious clients has asked for our assistance in seeking a Security Analyst. Our client, located in Mexico City, Mexico, is a seasoned...

  • Oliver Wyman

    hace 4 semanas


    Ciudad de México MMC Corporate A tiempo completo

    Oliver Wyman is a global leader in management consulting. With offices in 70 cities across 30 countries, Oliver Wyman combines deep industry knowledge with specialized expertise in strategy, operations, risk management, and organization transformation. Our 6,500+ professionals help clients optimize their business, improve their operations and risk profile,...


  • Ciudad de México Schneider Electric Gruppe A tiempo completo

    Job Description - Endpoint Security Operations Analyst (008RL6) Endpoint Security Operations Analyst - 008RL6 The Security Analyst should be a service-oriented person. He/she will be supporting, monitoring and maintaining the Endpoint security suite within the organization. He/she will manage incidents, service requests, in many varied areas such as IT...

  • Senior Risk

    hace 7 días


    Ciudad de México Tiger Text A tiempo completo

    About IT In Nestlé We are a team of IT professionals from many countries and diverse backgrounds, each with unique missions and challenges in the biggest health, nutrition and wellness company of the world. We innovate every day through forward-looking technologies to create opportunities for Nestlé’s digital challenges with our consumers, customers...


  • Ciudad de México Page Personnel A tiempo completo

    Experiência solida en Risk management - Dar seguimiento con vendors, control interno, auditoria **Sobre nuestro cliente**: Empresa de consultoría y seguridad de IT **Descripción**: Principales responsabilidades: - Análisis de riesgo, riesgo crediticio y vendor management - Construcción de reportes y análisis de datos - Contacto con vendors -...

  • Sr Risk

    hace 6 días


    Ciudad de México Nestle A tiempo completo

    **About IT Nestlé** We are a team of IT professionals from many countries and diverse backgrounds, each with unique missions and challenges in the biggest health, nutrition, and wellness company of the world. We innovate every day through forward-looking technologies to create opportunities for Nestlé’s digital challenges with our consumers, customers...

  • IT Risk

    hace 2 semanas


    Ciudad de México Tiger Text A tiempo completo

    Description Execute the full lifecycle of information security and data privacy third-party risk assessments as needed, either individually or through available resources, within the region Assist and execute control assessment activities to identify control effectiveness, maturity and areas for improvements within region Collaborate with internal...

  • IT Security Eng

    hace 17 horas


    Ciudad Juarez, México WISTRON MÉXICO, S.A. DE C.V. A tiempo completo

    **WISTRON MEXICO** **Has a great Job opportunity as**: **IT SECURITY ENG.** **Requirements**: - Bachelor Degree in IT, Computer Science, Systems or related fields. - 2 years of experience in Security Systems area. - 70 % of English spoken **Essential Job Functions** - Develop and maintain a cybersecurity governance framework - Monitor existing and...

  • IT Risk

    hace 2 semanas


    Ciudad de México Takeda A tiempo completo

    By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda’s Privacy Notice and Terms of Use . I further attest that all information I submit in my employment application is true to the best of my...


  • Ciudad Juarez, México WISTRON MÉXICO, S.A. DE C.V. A tiempo completo

    **WISTRON MEXICO** **Has a great Job opportunity for you as**: **IT INFORMATION SECURITY ENG.** **Job Summary** **Requirements**: - Collage degree in IT, Computer Science or related. - 1 year of experience in the area. - Knowledge of cyber security standards such as NIST, ISO, and GDPR - Bilingual 70% of English spoken - Experience with risk management...


  • México Fortra, LLC A tiempo completo

    The Fortra Security Compliance Analyst responds to security and compliance requests from customers, consultants, and other external entities in the form of questionnaires, audits, and reviews. The A nalyst position is also an internal security and compliance resource supporting Legal, HR, IT, Sales , SecOps , and GRC departments. ...


  • Ciudad Juarez, México WISTRON MÉXICO, S.A. DE C.V. A tiempo completo

    WISTRON MEXICO Has a great Job opportunity as: **SECURITY SYSTEMS IT ENG.** **Requirements**: - Bachelor Degree in IT, Computer Science, Systems or related fields. - 2 years of experience in Security Systems area. - 70 % of English spoken **Essential Job Functions** - Develop and maintain a cybersecurity governance framework - Monitor existing and...

  • IT Risk

    hace 2 semanas


    Delegación Cuajimalpa de Morelos, Ciudad de México Takeda Pharmaceutical A tiempo completo

    By clicking the "Apply" button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda's Privacy Notice and Terms of Use. I further attest that all information I submit in my employment application is true to the best of my knowledge.Job...


  • Ciudad de México TD SYNNEX A tiempo completo

    **Overview** Nearly every aspect of TD SYNNEX business is driven by Information Technology from inventory planning, logistics, order management, configuration, shipping, invoicing and settlement. Our systems are a high transactional volume environment with a significant amount of our revenue derived through our eBusiness services. **Working here is your...


  • Ciudad de México QAD, Inc. A tiempo completo

    Company Description QAD is building a world-class SaaS company, and we are growing. We are looking for talented individuals who want to join us on our mission to help solve relevant real-world problems in manufacturing and the supply chain. - We are a virtual first company and your primary work experience will be virtual / working from your home. Occasional...


  • Ciudad de México Takeda A tiempo completo

    By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda’s Privacy Notice and Terms of Use . I further attest that all information I submit in my employment application is true to the best of my...


  • Ciudad de México Nissan A tiempo completo

    **Information Security GRC Analyst II - Third-Party Risk Management** With a focus on Mobility, Operational Excellence, Value to our Customers and the Electrification of vehicles, you can expect to be part of something exciting. From the sleek design of our vehicles to the unique opportunities we offer around the globe, Nissan exemplifies ingenuity in...