Accountabilities:

Manage and respond to customer security inquiries, due diligence requests, security questionnaires, and security-related sections of RFPs and RFIs using approved documentation, templates, and guidance.
Review, prioritize, track, and coordinate customer security requests, audit evidence submissions, contractual reviews, and third-party risk assessments through ServiceNow or other approved workflow platforms.
Collaborate with Information Security, Legal, Privacy, Procurement, Sales, Product, and technical stakeholders to collect, validate, and approve accurate security-related information.
Prepare clear, professional, and customer-appropriate responses covering security controls, organizational policies, compliance frameworks, certifications, audit reports, privacy practices, and risk management activities.
Support the review of customer and vendor contracts, particularly clauses relating to information security, data protection, privacy, audit rights, incident notification, third-party obligations, and regulatory compliance.
Assess customer and supplier security requirements against internal policies, established standards, control capabilities, and approved risk positions.
Identify potential control gaps, non-standard contractual commitments, conflicting requirements, unclear language, and other risk indicators, escalating concerns to the appropriate internal teams.
Coordinate audit evidence requests with control owners and internal audit stakeholders, ensuring that all externally shared documentation is accurate, up to date, approved, and authorized for disclosure.
Support third-party risk management activities, including vendor and supplier due diligence, security assessments, periodic reviews, renewals, and ongoing monitoring.
Evaluate vendor-provided security questionnaires, certifications, audit reports, policies, and supporting documentation against established assessment criteria.
Maintain accurate records of third-party assessments, outstanding documentation, risk decisions, exceptions, remediation plans, approvals, and follow-up activities.
Help develop and maintain customer-facing Trust Center resources covering information security, privacy, compliance, certifications, audits, and assurance documentation.
Regularly review published Trust Center materials to ensure accuracy, relevance, consistency, and alignment with approved internal policies and disclosures.
Maintain and improve standardized response libraries, security FAQs, customer assurance materials, third-party risk guidance, and internal knowledge resources.
Document customer inquiries, questionnaire responses, contractual reviews, audit evidence, risk assessments, escalations, and final decisions.
Monitor request volumes, turnaround times, outstanding reviews, and recurring issues to ensure timely completion and effective reporting.
Identify recurring customer concerns, vendor risk trends, documentation gaps, and process inefficiencies, recommending improvements to strengthen operational effectiveness.
Contribute to internal procedures, process documentation, and guidance covering customer security reviews, audit coordination, contractual assessments, Trust Center management, and third-party risk management.

Requirements

Bachelor's degree in Information Systems, Cybersecurity, Risk Management, or a related discipline, or equivalent professional experience.
At least 6 years of relevant experience in information security, compliance, customer assurance, third-party risk management, audit support, contract support, vendor management, or a related field.
Required familiarity with major security, privacy, and compliance frameworks, including ISO 27001, NIST SP 800-171, GDPR, and SOC 2.
Experience responding to customer security inquiries, due diligence requests, security questionnaires, and security-related RFP/RFI requirements.
Understanding of security-related contractual provisions, including information security obligations, audit rights, incident notification, data protection, privacy, third-party requirements, and regulatory compliance.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1