Analyst, IT Security Vendor Risk Mgmt
hace 3 semanas
**_Every great story has a new beginning, and yours starts here._**
**_ Welcome to Warner Bros. Discoverythe stuff dreams are made of._**
**Who We Are **
When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the _storytellers_ bringing our characters to life, the_ creators_ bringing them to your living rooms and the _dreamers_ creating what’s next
From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.
**The Job**
**RISK ASSESSMENTS**
- Use WBD processes and tools to perform 3rd party vendor risk assessments, for new and existing vendors
- Work with business to understand the “what” and “how” of services provided by vendor to assess level of risk and scope of assessment
- Perform timely assessments of Vendor controls to identify, document, and communicate key deficiencies to the business and Information Security management
- Report on assessment outcomes, risk level and associated recommendations to remediate issues
- Assist with follow-up on documentation requests for initial and periodic assessments
**FINDINGS MANAGEMENT**
- Monitor corrective action plans against agreed upon timelines
- Review remediation evidence for closure of findings
**CONTRACT REVIEWS**
- Review contracts to ensure appropriate data security terms are included
- Provide comment and acceptable alternatives to vendor contract revisions, in alignment with defined guidance
- Escalate provision changes, as needed
**OTHER**
- Assist with contract intake to ensure pipeline of assessments is managed in a timely and efficient manner
- Provide periodic status updates
- Maintain accurate and complete data within the identified system of record
- Contribute to the team’s continuous improvement efforts by identifying opportunities and helping to implement them
**The Essentials**
- BS/BA degree required
- 3-5 years’ experience in information security, with at least one (1) year experience in third party risk management
- Knowledge of IP network infrastructure (firewalls, intrusion detection/prevention), access control, data encryption and physical security; Cloud security knowledge a plus
- Excellent communication skills, including the ability to communicate effectively in English, both written and verbal
- Ability to present complex topics in clear, non-technical language
- Ability to work collaboratively within team and across business and technology functions
- Detail-oriented individual with critical thinking, analytical, and problem-solving skills
- Demonstrated ability to be proactive and take ownership of and solve problems
- Active learner - able to enhance personal, professional, and business growth through new knowledge and experiences
- Ability to handle multiple assignments concurrently within an iterative environment
**The Nice to Haves**
- One or more of the following certifications: CISSP, CRISC, CISA
- 2+ years of prior experience in a related field (media, entertainment, business development or streaming services industry experience a plus)
- Familiarity with streaming and similar products/services
- Experience working in a national or global company
**How We Get Things Done**
**The Legal Bits
-
Sr. IT Vendor Specialist
hace 6 días
Ciudad de México Celanese International Corporation A tiempo completoOverview: **Responsibilities**: - Serve as the primary point of contact for all assigned IT vendors; - Continually challenge vendors to achieve exceptional levels of performance; - Execute IT vendor performance management framework that establishes performance metrics, tools for analyzing and reporting performance, and a constant end-to-end process for...
-
Sr. IT Vendor Specialist
hace 17 horas
Ciudad de México Celanese International Corporation A tiempo completoDescripción General: **Responsabilidades**: - Serve as the primary point of contact for all assigned IT vendors; - Continually challenge vendors to achieve exceptional levels of performance; - Execute IT vendor performance management framework that establishes performance metrics, tools for analyzing and reporting performance, and a constant end-to-end...
-
IT Security Lead
hace 3 semanas
Ciudad de México CHUBB A tiempo completoThe Cybersecurity Manager is the primary technical security contact within their region for security risk analysis, gap identification, and mitigation/remediation activities. Engage with key stakeholders to ensure that processes and initiatives operate within the documented security org framework, monitor security policy/standards compliance, and...
-
Security Analyst
hace 3 semanas
Ciudad de México Precise Resource A tiempo completoSecurity Analyst Precise Resource, Inc. is a leading privately held Woman Business Enterprise specializing in Executive Search and head-hunting services for Fortune 500 clients across the United States. One of our more prestigious clients has asked for our assistance in seeking a Security Analyst. Our client, located in Mexico City, Mexico, is a seasoned...
-
Oliver Wyman
hace 4 semanas
Ciudad de México MMC Corporate A tiempo completoOliver Wyman is a global leader in management consulting. With offices in 70 cities across 30 countries, Oliver Wyman combines deep industry knowledge with specialized expertise in strategy, operations, risk management, and organization transformation. Our 6,500+ professionals help clients optimize their business, improve their operations and risk profile,...
-
Endpoint Security Operations Analyst
hace 3 semanas
Ciudad de México Schneider Electric Gruppe A tiempo completoJob Description - Endpoint Security Operations Analyst (008RL6) Endpoint Security Operations Analyst - 008RL6 The Security Analyst should be a service-oriented person. He/she will be supporting, monitoring and maintaining the Endpoint security suite within the organization. He/she will manage incidents, service requests, in many varied areas such as IT...
-
Senior Risk
hace 7 días
Ciudad de México Tiger Text A tiempo completoAbout IT In Nestlé We are a team of IT professionals from many countries and diverse backgrounds, each with unique missions and challenges in the biggest health, nutrition and wellness company of the world. We innovate every day through forward-looking technologies to create opportunities for Nestlé’s digital challenges with our consumers, customers...
-
Vendor Management Support
hace 5 días
Ciudad de México Page Personnel A tiempo completoExperiência solida en Risk management - Dar seguimiento con vendors, control interno, auditoria **Sobre nuestro cliente**: Empresa de consultoría y seguridad de IT **Descripción**: Principales responsabilidades: - Análisis de riesgo, riesgo crediticio y vendor management - Construcción de reportes y análisis de datos - Contacto con vendors -...
-
Sr Risk
hace 6 días
Ciudad de México Nestle A tiempo completo**About IT Nestlé** We are a team of IT professionals from many countries and diverse backgrounds, each with unique missions and challenges in the biggest health, nutrition, and wellness company of the world. We innovate every day through forward-looking technologies to create opportunities for Nestlé’s digital challenges with our consumers, customers...
-
IT Risk
hace 2 semanas
Ciudad de México Tiger Text A tiempo completoDescription Execute the full lifecycle of information security and data privacy third-party risk assessments as needed, either individually or through available resources, within the region Assist and execute control assessment activities to identify control effectiveness, maturity and areas for improvements within region Collaborate with internal...
-
IT Security Eng
hace 17 horas
Ciudad Juarez, México WISTRON MÉXICO, S.A. DE C.V. A tiempo completo**WISTRON MEXICO** **Has a great Job opportunity as**: **IT SECURITY ENG.** **Requirements**: - Bachelor Degree in IT, Computer Science, Systems or related fields. - 2 years of experience in Security Systems area. - 70 % of English spoken **Essential Job Functions** - Develop and maintain a cybersecurity governance framework - Monitor existing and...
-
IT Risk
hace 2 semanas
Ciudad de México Takeda A tiempo completoBy clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda’s Privacy Notice and Terms of Use . I further attest that all information I submit in my employment application is true to the best of my...
-
IT Information Security Eng
hace 6 días
Ciudad Juarez, México WISTRON MÉXICO, S.A. DE C.V. A tiempo completo**WISTRON MEXICO** **Has a great Job opportunity for you as**: **IT INFORMATION SECURITY ENG.** **Job Summary** **Requirements**: - Collage degree in IT, Computer Science or related. - 1 year of experience in the area. - Knowledge of cyber security standards such as NIST, ISO, and GDPR - Bilingual 70% of English spoken - Experience with risk management...
-
Security Compliance Analyst
hace 3 semanas
México Fortra, LLC A tiempo completoThe Fortra Security Compliance Analyst responds to security and compliance requests from customers, consultants, and other external entities in the form of questionnaires, audits, and reviews. The A nalyst position is also an internal security and compliance resource supporting Legal, HR, IT, Sales , SecOps , and GRC departments. ...
-
Security Systems IT Eng
hace 4 días
Ciudad Juarez, México WISTRON MÉXICO, S.A. DE C.V. A tiempo completoWISTRON MEXICO Has a great Job opportunity as: **SECURITY SYSTEMS IT ENG.** **Requirements**: - Bachelor Degree in IT, Computer Science, Systems or related fields. - 2 years of experience in Security Systems area. - 70 % of English spoken **Essential Job Functions** - Develop and maintain a cybersecurity governance framework - Monitor existing and...
-
IT Risk
hace 2 semanas
Delegación Cuajimalpa de Morelos, Ciudad de México Takeda Pharmaceutical A tiempo completoBy clicking the "Apply" button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda's Privacy Notice and Terms of Use. I further attest that all information I submit in my employment application is true to the best of my knowledge.Job...
-
Cyber Security Defense Analyst
hace 2 semanas
Ciudad de México TD SYNNEX A tiempo completo**Overview** Nearly every aspect of TD SYNNEX business is driven by Information Technology from inventory planning, logistics, order management, configuration, shipping, invoicing and settlement. Our systems are a high transactional volume environment with a significant amount of our revenue derived through our eBusiness services. **Working here is your...
-
Associate Information Security Analyst
hace 7 días
Ciudad de México QAD, Inc. A tiempo completoCompany Description QAD is building a world-class SaaS company, and we are growing. We are looking for talented individuals who want to join us on our mission to help solve relevant real-world problems in manufacturing and the supply chain. - We are a virtual first company and your primary work experience will be virtual / working from your home. Occasional...
-
Information Security Solution Analyst
hace 7 días
Ciudad de México Takeda A tiempo completoBy clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda’s Privacy Notice and Terms of Use . I further attest that all information I submit in my employment application is true to the best of my...
-
Third-party Risk Management
hace 7 días
Ciudad de México Nissan A tiempo completo**Information Security GRC Analyst II - Third-Party Risk Management** With a focus on Mobility, Operational Excellence, Value to our Customers and the Electrification of vehicles, you can expect to be part of something exciting. From the sleek design of our vehicles to the unique opportunities we offer around the globe, Nissan exemplifies ingenuity in...