Senior Product Manager (Third Party Risk Security)
Recorded Future- Full Time
- Senior (5 to 8 years)
Candidates should possess a minimum of 7 years of experience in cybersecurity roles such as risk management, vendor risk assessments, incident response, security operations, security engineering, or network security, along with a strong understanding of security best practices including application security, secure software development lifecycles, risk management, data protection, encryption, identity and access management, security governance, and network security. Experience with common cybersecurity frameworks and standards like NIST, ISO 27001, SOC2, and GDPR is required, as well as experience collaborating and communicating with stakeholders across multiple geographies.
The Senior Staff, Security Third Party Risk Management professional will conduct comprehensive risk assessments of third-party vendors, manage the vendor intake process, and review required evidence; partner with procurement, legal, compliance, IT, and other functions to ensure due diligence is performed; monitor and assess the security of third parties and support the response and remediation of cybersecurity incidents; evaluate and implement improvements to the TPRM program, including policies, procedures, and technical security standards; and generate security risk rating metrics and reports while escalating potential risks or non-responses.
Cloud-based cybersecurity and secure gateway services
Zscaler provides cloud-based information security services, focusing on internet, web, and cloud security. Its platform functions as a secure gateway that inspects all internet traffic between users and applications, ensuring that threats are identified and stopped before they can access a client's network. This service is offered through a subscription model, allowing large enterprises and government organizations to select the level of security that meets their needs. Zscaler differentiates itself from competitors by offering a strong partner program that enhances market reach and provides partners with training and resources. The company's goal is to support secure digital transformation for its clients by delivering reliable security solutions.