3rd Party Risk Management Cyber Security Purple Team Analyst

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Hybrid Pathways, so some details may not match this job. The employer's own page has the real description.

Job Overview

The 3rd Party Risk Management Cyber Security Purple Team Analyst at Hybrid Pathways will play a critical role in strengthening the security posture of the organization by collaborating with internal and external teams to identify, assess, and mitigate risks associated with third-party services. This position entails rigorous assessment of third-party cybersecurity practices, enhancing vulnerability management, conducting red team/blue team exercises, and developing strategies to manage risks effectively. The ideal candidate will demonstrate strong analytical capabilities and a proactive approach to cybersecurity, ensuring compliance and robust defense mechanisms against potential threats.

Job Responsibilities

• Conduct thorough assessments of third-party vendors to evaluate their security practices and compliance with organizational standards.
• Collaborate with red teams and blue teams to simulate attacks and enhance incident response capabilities.
• Develop, implement, and maintain risk assessment frameworks and reporting mechanisms.
• Analyze and resolve vulnerabilities identified during assessments, ensuring appropriate remediation strategies are in place.
• Stay informed on emerging threats and vulnerabilities affecting third-party services and advise stakeholders accordingly.
• Prepare detailed reports and presentations for internal stakeholders to communicate risk levels and remediation plans.
• Work closely with the procurement and legal teams to incorporate cybersecurity risk considerations into vendor contracts.
• Participate in continuous improvement initiatives to enhance the organization's overall third-party risk management processes.

Qualifications

• Bachelor’s degree in Cyber Security, Information Technology, or a related field.
• 3+ years of experience in cyber security, specifically focusing on risk management and third-party assessments.
• Strong knowledge of regulatory frameworks and standards such as NIST, ISO 27001, and GDPR.
• Experience with red and blue team activities, vulnerability management, and incident response.
• Proficiency in using security tools such as SIEM, firewalls, and vulnerability scanners.
• Excellent analytical and problem-solving skills.
• Strong verbal and written communication skills for effective stakeholder engagement.
• Relevant certifications such as CISSP, CISM, or CRISC are preferred.

Technologies & Tools

The 3rd Party Risk Management Cyber Security Purple Team Analyst will utilize a variety of technologies and tools, including but not limited to Security Information and Event Management (SIEM) systems, endpoint detection and response (EDR) tools, vulnerability assessment software, and automated security compliance platforms. Knowledge of scripting languages and penetration testing tools is also essential in conducting comprehensive risk assessments and defensive measures.

Ideal Candidates

The ideal candidate for this role is someone who possesses a strong technical foundation in cybersecurity and risk management, complemented by critical thinking and excellent problem-solving abilities. They should have an inquisitive mindset, showcasing a passion for staying updated on the latest threats and vulnerabilities in the cybersecurity landscape. Effective communication skills and the ability to work collaboratively in a team-oriented environment are essential attributes, enabling them to engage constructively with diverse stakeholders across the organization. A self-driven individual, capable of multitasking and managing competing priorities, will thrive in this dynamic role.