Momentive Software
Momentive Software
Momentive Software коммерциялық емес ұйымдар мен қауымдастықтарға арналған бизнеске арналған бағдарламалық жасақтама әзірлейді. Оның өнімдер жиынтығы қауымдастықтарды басқаруды, қаражат жинауды, іс-шараларды басқаруды, оқытуды басқаруды, қаржылық операцияларды және деректер талдауын қолдайды. Бұл миссияға бағытталған ұйымдарға жұмысын үйлестіруге, мүшелерімен және донорларымен байланыс орнатуға әрі мықты қауымдастықтар құруға көмектеседі. Компанияда хабарланған мәлімет бойынша 1 001-ден 5 000-ға дейін қызметкер бар, сондықтан ол бағдарламалық жасақтама саласындағы ірі жұмыс берушілердің бірі болып саналады.

Senior Third-Party Risk Management Analyst | Momentive Software | Remote, United States

Lead third-party cybersecurity risk management for Momentive Software’s cloud-based nonprofit and association management platform. Manage vendor assessments, control reviews, audit evidence, compliance activities, and client vulnerability notifications.

Сипаттама

  • Manage Momentive Software’s global inventory of third-party providers, applications, and services from onboarding through termination.
  • Lead vendor cybersecurity assessments in partnership with Cybersecurity Engineering, Legal, and business owners.
  • Evaluate vendor maturity against NIST CSF, CIS, CMMC, GDPR, PCI DSS, SOC 2, and other applicable frameworks.
  • Oversee vendor SLAs, RPO/RTO commitments, breach notification obligations, and cybersecurity insurance records.
  • Record assessment findings, recommendations, and remediation plans.
  • Coordinate with internal and external auditors on vendor controls and evidence collection.
  • Supply evidence, documentation, and control validation for SOC 2 Type II and PCI DSS assessments.
  • Keep policies, standards, procedures, and risk treatment plans complete and audit-ready.
  • Track vendor exceptions and compensating controls.
  • Support vulnerability notifications for clients responsible for their own cybersecurity controls.
  • Advise clients on risk impact, remediation expectations, and cybersecurity practices.
  • Maintain records and metrics for client notifications, follow-up activities, and closure.
  • Strengthen the ISMS by aligning vendor risk processes with company policies, standards, and procedures.
  • Contribute to control selection, risk treatment plans, and cybersecurity control effectiveness metrics.
  • Monitor emerging threats, regulatory developments, and industry trends affecting third-party risk.
  • Support disaster recovery and business continuity planning for vendor dependencies and resilience.
  • Partner with Legal, Cybersecurity, and leadership on strategies to reduce vendor-related risk.
  • Promote enterprise cybersecurity awareness through outreach, training, and education.
  • Provide professional, consultative support to internal and external stakeholders.
  • Mentor colleagues and contribute to training materials and internal documentation.

Талаптар

  • At least five years of experience in cybersecurity, risk management, audit, or compliance.
  • Advanced knowledge of PCI DSS, SOC 2, GDPR, GLBA, HIPAA, SOX, and HITRUST.
  • Experience assessing legacy and modern cloud environments, including AWS, Google Cloud Platform, and Azure.
  • Strong understanding of APIs, application security, encryption, endpoint security, and network security.
  • Familiarity with SIEM, intrusion detection, log management, vulnerability management, and threat intelligence.
  • Able to evaluate vendor controls, map them to frameworks, and explain risk to nontechnical stakeholders.
  • Strong project management, prioritization, multitasking, and organizational abilities.
  • Excellent written and verbal communication skills.
  • Experience supporting SOC 2 Type II and PCI DSS audits is preferred.
  • Experience with eGRC or IT GRC platforms such as Jira Service Management GRC, Archer, OneTrust, or LogicGate is preferred.
  • Certifications such as CISSP, CISM, CISA, CRISC, CTPRA, or CTPRP are preferred.
  • Must be authorized to work in the United States without sponsorship.
  • Must be at least 18 years old.

Артықшылықтар

  • Medical, dental, and vision coverage.
  • 401(k) savings plan with company matching.
  • Flexible planned paid time off.
  • Generous sick leave.
  • Inclusive and welcoming work environment.
  • Purpose-driven company culture.
  • Support for work-life balance.
  • Commitment to community involvement.
  • Employer-paid parental leave.
  • Employer-paid short-term disability coverage.
  • Remote work flexibility.

Ұқсас жұмыс орындары

XTB online investing

Junior Customer Support Specialist (Czech)

XTB online investing
1 001 – 5 000 Қызметкерлер
B2CҚаржыФинтех

Support Czech- and Slovak-speaking clients at XTB, a financial technology company. Handle inquiries, maintain CRM records, and follow financial market developments.

Ашу
Ovoko \ RRR.LT

Senior Data Platform Engineer

Ovoko \ RRR.LT

Build the data infrastructure behind Ovoko’s used-car-parts marketplace, supporting analytics, AI, and product development. Work across Kubernetes, AWS, and Snowflake to keep data platforms reliable and scalable.

Ашу
ESTO Group

Lithuanian-Speaking Customer Support Specialist

ESTO Group
51 – 200 Қызметкерлер
ҚаржыФинтех

Support ESTO’s flexible payment and financial services for Lithuanian customers, combining customer service with B2C sales. Handle inquiries and sales conversations by phone, email, and chat.

Ашу
Curana Health

Director of Data Engineering

Curana Health

Lead data engineering for Curana Health’s value-based senior care platform, modernizing its data infrastructure, pipelines, and analytics delivery while guiding a team of data engineers.

Ашу
Mouser Electronics

Customer Service Representative – Milan Hybrid

Mouser Electronics
1 001 – 5 000 Қызметкерлер
КонсалтингЛогистикаМаркетинг

Handle Mouser Electronics customer orders, quotes, returns and product inquiries while helping grow sales and maintain customer satisfaction. Join the Milan-area team in a hybrid role.

Ашу
Aztec Group

Senior Enterprise Data Architect

Aztec Group

Design Aztec Group’s Databricks Lakehouse and Azure data platforms, setting enterprise architecture, master data management, and governance standards. Build secure, AI-ready data foundations for outsourced services.

Ашу
Teleperformance

Customer Service Specialist, Aviva Travel Insurance

Teleperformance

Work remotely in the United Kingdom for Teleperformance, processing Aviva travel insurance policies and upgrades. Manage FCA-regulated complaints, medical queries, underwriting risks, and support for vulnerable customers.

Ашу
Optro

Technical Support Specialist – German and English | Optro, Poland

Optro
501 – 1 000 Қызметкерлер
SaaSЖасанды интеллектСәйкестік

Help Optro customers use its AI-powered governance, risk, and compliance platform. Troubleshoot issues, guide users, and work with product and engineering teams to improve support.

Ашу