Vendor Risk Analyst

Equal Employment Opportunity RBS Citizens, N.A. is an equal opportunity and affirmative action employer. RBS Citizens, N.A. does not discriminate on the basis of race, color, religion, sex, age, national origin, physical or mental disability, sexual preference, gender identity or expression, or status as a special disabled veteran, Vietnam veteran, or other veteran of the United States Armed Forces, or any other protected characteristic. Pay,Benefits, & Work Schedule Hours Per Week: 40 Work Schedule: Monday-Friday 8:30am-5pm Qualifications College degree or a minimum of 6 years IT andor security management experience. CISSP, CISM, IAM or similar industry certification required. Prefer prior experience assessing the security posture and/or information security program of 3rd party service providers or data centers. Ability to analyze the results of an Information Security Request for Information (RFI) and identify strengths and weaknesses of a given information security program. Strong written and oral communication skills Excellent analytical and problem solving ability Ability to multi-task and routinely reassess priorities in order to meet expectations/deadlines Ability to evaluate Information Security RFI results and articulate identified associated risks and escalate deficiencies & observations as appropriate to management and in a timely manner Strong technical background preferred. Relevant experience or exposure in at least two of the following distributed server areas preferred; Configuring Server OS (Windows andor Unix), Developing or implementing servers OS hardening standards, Managing or implementing a security OS patching program, Managing zero day threat program. Relevant experience or exposure in at least two of the following security technology areas preferred; Network Intrusion Detection Systems, Host Intrusion Detection Systems, Security Events Monitoring, Intrusion Prevention, firewalls. Relevant experience or exposure to commonly available vulnerability assessment tools Responsibilities As a member of the IRM Vendor Risk Management team, this individual will be responsible for evaluating the information security program documentation provided by 3rd party service providers. In this role, the individual be responsible for the following; analyzing InfoSec RFIs' and SAS-70 documentation, following-up with vendors when more detailed information or clarification may be required, make determinations as to the maturity level of each service providers' Information security program, assign appropriate risk ratings, document observations andor concerns, and recommend areas of improvement. If interested, please apply online at http://track.jobviper.com/ViewJob.asp?id=509499-3-553 Search for this position with the Reference Code 339210 entered in the Job Requisition # section of your search. Job Title: Vendor Risk Analyst Company: Citizens Bank Location: US-RI-Cranston Status: Full Time, Employee Job Category: IT/Software Development Company: Citizens Bank Reference Code: 339210