LogoFresh Jobs Ahead
Momentive Software
Momentive Software
1 001 – 5 000 Xodimlar
B2BDasturiy ta’minotNotijorat
Momentive Software notijorat tashkilotlar va uyushmalar uchun biznesdan biznesga mo‘ljallangan dasturiy ta’minot ishlab chiqadi. Uning mahsulotlar to‘plami uyushmalarni boshqarish, mablag‘ yig‘ish, tadbirlarni boshqarish, ta’limni boshqarish, moliyaviy operatsiyalar va ma’lumotlar tahlilini qo‘llab-quvvatlaydi. Bu missiyaga yo‘naltirilgan tashkilotlarga ishini muvofiqlashtirish, a’zolar va donorlar bilan aloqalarni rivojlantirish hamda yanada mustahkam hamjamiyatlar qurishda yordam beradi. Xabar qilingan ma’lumotlarga ko‘ra, kompaniyada 1 001 dan 5 000 gacha xodim ishlaydi va u dasturiy ta’minot sohasidagi yirik ish beruvchilardan biridir.
LinkedIn
Kompaniyadagi ish o‘rinlari

Senior Third-Party Risk Management Analyst | Momentive Software | Remote, United States

Lead third-party cybersecurity risk management for Momentive Software’s cloud-based nonprofit and association management platform. Manage vendor assessments, control reviews, audit evidence, compliance activities, and client vulnerability notifications.

USAmerika Qo‘shma ShtatlariMasofaviyTo‘liq stavkaSeniorTalab Qilinadigan Til: inglizchaBiznes tahlilchisi
AWSAzureBulutGoogle Cloud PlatformKiberxavfsizlik

Tavsif

  • Manage Momentive Software’s global inventory of third-party providers, applications, and services from onboarding through termination.
  • Lead vendor cybersecurity assessments in partnership with Cybersecurity Engineering, Legal, and business owners.
  • Evaluate vendor maturity against NIST CSF, CIS, CMMC, GDPR, PCI DSS, SOC 2, and other applicable frameworks.
  • Oversee vendor SLAs, RPO/RTO commitments, breach notification obligations, and cybersecurity insurance records.
  • Record assessment findings, recommendations, and remediation plans.
  • Coordinate with internal and external auditors on vendor controls and evidence collection.
  • Supply evidence, documentation, and control validation for SOC 2 Type II and PCI DSS assessments.
  • Keep policies, standards, procedures, and risk treatment plans complete and audit-ready.
  • Track vendor exceptions and compensating controls.
  • Support vulnerability notifications for clients responsible for their own cybersecurity controls.
  • Advise clients on risk impact, remediation expectations, and cybersecurity practices.
  • Maintain records and metrics for client notifications, follow-up activities, and closure.
  • Strengthen the ISMS by aligning vendor risk processes with company policies, standards, and procedures.
  • Contribute to control selection, risk treatment plans, and cybersecurity control effectiveness metrics.
  • Monitor emerging threats, regulatory developments, and industry trends affecting third-party risk.
  • Support disaster recovery and business continuity planning for vendor dependencies and resilience.
  • Partner with Legal, Cybersecurity, and leadership on strategies to reduce vendor-related risk.
  • Promote enterprise cybersecurity awareness through outreach, training, and education.
  • Provide professional, consultative support to internal and external stakeholders.
  • Mentor colleagues and contribute to training materials and internal documentation.

Talablar

  • At least five years of experience in cybersecurity, risk management, audit, or compliance.
  • Advanced knowledge of PCI DSS, SOC 2, GDPR, GLBA, HIPAA, SOX, and HITRUST.
  • Experience assessing legacy and modern cloud environments, including AWS, Google Cloud Platform, and Azure.
  • Strong understanding of APIs, application security, encryption, endpoint security, and network security.
  • Familiarity with SIEM, intrusion detection, log management, vulnerability management, and threat intelligence.
  • Able to evaluate vendor controls, map them to frameworks, and explain risk to nontechnical stakeholders.
  • Strong project management, prioritization, multitasking, and organizational abilities.
  • Excellent written and verbal communication skills.
  • Experience supporting SOC 2 Type II and PCI DSS audits is preferred.
  • Experience with eGRC or IT GRC platforms such as Jira Service Management GRC, Archer, OneTrust, or LogicGate is preferred.
  • Certifications such as CISSP, CISM, CISA, CRISC, CTPRA, or CTPRP are preferred.
  • Must be authorized to work in the United States without sponsorship.
  • Must be at least 18 years old.

Imtiyozlar

  • Medical, dental, and vision coverage.
  • 401(k) savings plan with company matching.
  • Flexible planned paid time off.
  • Generous sick leave.
  • Inclusive and welcoming work environment.
  • Purpose-driven company culture.
  • Support for work-life balance.
  • Commitment to community involvement.
  • Employer-paid parental leave.
  • Employer-paid short-term disability coverage.
  • Remote work flexibility.

O‘xshash ish o‘rinlari