Third parties can work on this job
Please note only candidates in the local Alpharetta or Atlanta, GA are are considered who can work 5 days in the office.
Cybersecurity Analyst with relationshipmant with Third-Party companies
Industry Certification such as CISA, CISSP, CISM, CRISC a HUGE advantage
Experience with Python development.
Fusion Third-Party Cyber Response Team Job Description
Team Overview
Fusion Tthird-Party Cyber Response team is responsible for analysis and triaging of cyber intelligence pertaining to Firm s third-party events / incidents and vulnerabilities. This includes determining required response actions, evaluating potential Firm impact & exposure, and performing internal and external outreach to understand the impact.
Key Focus Areas:
Vendor cyber security related events and vulnerabilities related analysis, triaging, outreach , escalation and reporting.
Explore automation to enhance efficiency and quality of various team processes.
Collaboration with relevant stakeholders to identify and enhance the Third-Party Cyber event and incident process.
Key Responsibilities
Perform initial triage to understand the scope of services provided by the potentially impacted third party, including identification of Firm systems and applications potentially impacted.
Initiate outreach to the vendor to confirm whether third party and Firm have been impacted.
Establish clear communication channels for timely follow-ups, updates and escalation.
Apply foundational knowledge of attack vectors, techniques, and phases across network, cloud, and OS environments, as deemed required for incident management.
Coordinate with multiple internal teams throughout the incident lifecycle until closure.
Ensure alignment on remediation, communication, and reporting requirements.
Identify cybersecurity, operational, reputational risks related to Firm s third-party and Nth-party relationships.
Fulfil periodic reporting obligations.
Maintain comprehensive documentation for audit trail, throughout incident lifecycle as required.
Identify unique use cases, improvement scope in current process, document lessons learned and recommend process improvements to prevent recurrence.
Regularly review and update Team Procedures and Runbook as required.
Required Experience and Skills:
We are looking for :
8+ years of relevant experience in financial industry / technology, either in Incident Management or Third Party Risk Management (including Vendor Risk Assessments) fields.
Strong understanding of cybersecurity principles, ability to analyse threat intelligence and vendor reports.
Excellent communication and presentation skills both written and verbal; must be comfortable interacting with all management levels and a global workforce (strong English proficiency is essential).
Strong data analysis and reporting capabilities.
Proficiency with Microsoft Office (Excel, Word, PowerPoint); familiarity with ProcessUnity or ServiceNow is a plus.
A detailoriented, accurate, tenacious, and deliveryfocused mindset.
Basic knowledge of attack vectors and phases, and flexibility to work in shifts.
Desired Qualifications
Industry Certification such as CISA, CISSP, CISM, CRISC an advantage
Experience with Python development.
Never miss an opportunity! Create an alert based on the job you applied for.
