LogoFresh Jobs Ahead
Momentive Software
Momentive Software
1.001 – 5.000 Angajați
B2BNonprofitSoftware
Momentive Software dezvoltă software business-to-business pentru organizații nonprofit și asociații. Suita sa de produse oferă suport pentru gestionarea asociațiilor, strângerea de fonduri, gestionarea evenimentelor, managementul învățării, operațiunile financiare și analiza datelor, ajutând organizațiile orientate spre misiune să își coordoneze activitatea, să interacționeze cu membrii și donatorii și să construiască comunități mai puternice. Compania este un angajator important în domeniul software, având, potrivit informațiilor raportate, între 1.001 și 5.000 de angajați.
LinkedIn
Locurile de muncă ale companiei

Senior Third-Party Risk Management Analyst | Momentive Software | Remote, United States

Lead third-party cybersecurity risk management for Momentive Software’s cloud-based nonprofit and association management platform. Manage vendor assessments, control reviews, audit evidence, compliance activities, and client vulnerability notifications.

USStatele Unite ale AmericiiRemoteNormă întreagăSeniorLimbă Obligatorie: englezăAnalist de afaceri
AWSAzureCloudGoogle Cloud PlatformSecuritate cibernetică

Descriere

  • Manage Momentive Software’s global inventory of third-party providers, applications, and services from onboarding through termination.
  • Lead vendor cybersecurity assessments in partnership with Cybersecurity Engineering, Legal, and business owners.
  • Evaluate vendor maturity against NIST CSF, CIS, CMMC, GDPR, PCI DSS, SOC 2, and other applicable frameworks.
  • Oversee vendor SLAs, RPO/RTO commitments, breach notification obligations, and cybersecurity insurance records.
  • Record assessment findings, recommendations, and remediation plans.
  • Coordinate with internal and external auditors on vendor controls and evidence collection.
  • Supply evidence, documentation, and control validation for SOC 2 Type II and PCI DSS assessments.
  • Keep policies, standards, procedures, and risk treatment plans complete and audit-ready.
  • Track vendor exceptions and compensating controls.
  • Support vulnerability notifications for clients responsible for their own cybersecurity controls.
  • Advise clients on risk impact, remediation expectations, and cybersecurity practices.
  • Maintain records and metrics for client notifications, follow-up activities, and closure.
  • Strengthen the ISMS by aligning vendor risk processes with company policies, standards, and procedures.
  • Contribute to control selection, risk treatment plans, and cybersecurity control effectiveness metrics.
  • Monitor emerging threats, regulatory developments, and industry trends affecting third-party risk.
  • Support disaster recovery and business continuity planning for vendor dependencies and resilience.
  • Partner with Legal, Cybersecurity, and leadership on strategies to reduce vendor-related risk.
  • Promote enterprise cybersecurity awareness through outreach, training, and education.
  • Provide professional, consultative support to internal and external stakeholders.
  • Mentor colleagues and contribute to training materials and internal documentation.

Cerințe

  • At least five years of experience in cybersecurity, risk management, audit, or compliance.
  • Advanced knowledge of PCI DSS, SOC 2, GDPR, GLBA, HIPAA, SOX, and HITRUST.
  • Experience assessing legacy and modern cloud environments, including AWS, Google Cloud Platform, and Azure.
  • Strong understanding of APIs, application security, encryption, endpoint security, and network security.
  • Familiarity with SIEM, intrusion detection, log management, vulnerability management, and threat intelligence.
  • Able to evaluate vendor controls, map them to frameworks, and explain risk to nontechnical stakeholders.
  • Strong project management, prioritization, multitasking, and organizational abilities.
  • Excellent written and verbal communication skills.
  • Experience supporting SOC 2 Type II and PCI DSS audits is preferred.
  • Experience with eGRC or IT GRC platforms such as Jira Service Management GRC, Archer, OneTrust, or LogicGate is preferred.
  • Certifications such as CISSP, CISM, CISA, CRISC, CTPRA, or CTPRP are preferred.
  • Must be authorized to work in the United States without sponsorship.
  • Must be at least 18 years old.

Beneficii

  • Medical, dental, and vision coverage.
  • 401(k) savings plan with company matching.
  • Flexible planned paid time off.
  • Generous sick leave.
  • Inclusive and welcoming work environment.
  • Purpose-driven company culture.
  • Support for work-life balance.
  • Commitment to community involvement.
  • Employer-paid parental leave.
  • Employer-paid short-term disability coverage.
  • Remote work flexibility.

Locuri de muncă similare

MT Associates, LLC

Administrative Operations Coordinator

MT Associates, LLC
1 – 10 Angajați
CălătoriiConsultanțăJuridic
USStatele Unite ale AmericiiMOMissouri
55.000 $ – 65.000 $ / an
HibridNormă întreagăJuniorNivel mediuNu este necesară o diplomăLimbă Obligatorie: englezăOperațiuni

Coordinate ASL interpreting and CART captioning services, from client intake through scheduling and delivery. Support clients and contractors while improving operations for an accessibility services company.

Deschide