InfoSec Third Party Assurance Specialist
InfoSec Third Party Assurance Specialist
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Sport connects usacross borders time zones and cultures. At Sportradar we use that connection to drive technology forward. Our Information Security Governance Risk and Compliance (GRC) team is foundational in safeguarding the integrity and resilience of our operations.
We are looking for an InfoSec Third Party Assurance Specialist to assist in conducting cyber risk assessments of thirdparty technology suppliers ensure adherence to security policies and support the identification and record risks. If youre passionate about ensuring the security posture of vendors and enabling secure business growth at scale this role is for you.
THE CHALLENGE:
As an InfoSec Third Party Audit Specialist you will:
- Conduct security risk assessments on thirdparty vendors review SOC reports and evaluate technical and nontechnical controls.
- Maintain and enhance TPRM documentation including policies workflows and assessment templates aligned with ISO/IEC 27001 NIST and other relevant standards.
- Track and manage thirdparty risks through to remediation working directly with vendors and internal stakeholders.
- Contribute to the broader ISMS (Information Security Management System) and support internal risk compliance and audit activities.
- Participate in governance initiatives including regulatory compliance efforts awareness campaigns and crossfunctional risk assessments.
- Support the wider GRC team with reporting metrics and stakeholder communications.
YOUR PROFILE:
- 35 years of experience in thirdparty/vendor risk management preferably within an information security risk or compliance team.
- Strong working knowledge of information security standards and frameworks such as ISO/IEC 27001 SOC 2 NIST CSF or SIG.
- Familiarity with technology systems infrastructure and related security controls.
- Experience conducting vendor risk assessments including reviewing SOC 2 reports and security questionnaires.
- Familiarity with GRC platforms and tools used for thirdparty or enterprise risk management.
- Understanding of contractual and regulatory requirements around thirdparty risk (e.g. GDPR DORA or other industryspecific regulations).
- Bonus: Handson involvement in broader GRC functions like ISMS maintenance or Business Continuity Management (BCM).
- Preferred certifications: CISA CRISC CISSP or similar.
Additional Information :
At Sportradar we celebrate our diverse group of hardworking employees. Sportradar is committed to ensuring equal access to its programs facilities and employment opportunities. All qualified applicants will receive consideration for employment without regard to age race color religion sex sexual orientation gender identity national origin disability or status as a protected veteran. We encourage you to apply even if you only meet most of the requirements (but not 100% of the listed criteria) we believe skills evolve over time. If youre willing to learn and grow with us we invite you to join our team!
Remote Work :
No
Employment Type :
Fulltime
Employment Type
Full-time
