Security Third Party Risk Management Specialist Iii

Descrição do cargo About Cloudflare About Us At Cloudflare, we are on a mission to help build a better Internet.
Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code.
Our network powers millions of websites and Internet properties for customers ranging from individual bloggers to Fortune 500 companies.
Cloudflare's global network routes web traffic to improve performance and reduce spam and other attacks.
We are committed to building a diverse and inclusive team and hire based on potential, supporting employees throughout their time with Cloudflare.
Available Locations: Lisbon, Portugal.
We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills.
Come join us
The Team We are looking to hire an experienced Security Third Risk Management Specialist on our Governance, Risk, and Compliance team.
This role will be responsible for completing vendor security reviews, maintaining our vendor master list, and managing Cloudflare's Third Party Risk Program.
What You'll Do
Execute vendor security reviews by collecting and analyzing vendor security control documentation and audit reports.
Identify third-party security risks, document findings, and recommend risk treatment options.
Determine security contract requirements and communicate these to the Contracts & Legal teams.
Maintain Cloudflare's Vendor Master, including our list of Critical vendors.
Support Cloudflare's customer-facing and incident response teams by ensuring our vendors are not affected by recent zero-day vulnerabilities or security incidents.
Support Cloudflare's security certification audits by providing evidence of vendor security reviews.
Partner with stakeholders across Procurement, IT, Contracts, Legal, and Privacy to ensure vendor due diligence is completed efficiently.
Lead projects to improve the Vendor Security Review process, workflow, and tooling.
Some travel may be required to engage teammates and stakeholders in San Francisco, Austin, or other global Cloudflare locations.
Desirable
Skills, Knowledge and Experience Experience typically gained in 5-8 years working in Security GRC Experience reviewing vendor security documentation including ISO *, SOC 2, PCI DSS, and other audit reports Experience identifying security controls gaps, determining risk ratings, and recommending mitigating controls Familiarity with security contract requirements Strong organizational, analytical, and interpersonal skills Self-starter with the ability to work independently with a sense of curiosity Projects Project Galileo : Since **, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with tools to defend themselves against attacks that would censor their work, at no cost.
Athenian Project : In , we created the Athenian Project to protect state and local governments, serving more than 425 local government election websites in 33 states.
* : We released * to make the Internet faster, more secure, and privacy-centric.
We do not store client IP addresses and will continue to honor our privacy commitments.
Sound like something you'd like to be a part of?
We'd love to hear from you
This position may require access to information protected under U. S. export control laws, including the U. S. Export Administration Regulations.
Any offer of employment may be conditioned on authorization to receive software or technology controlled under these laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer.
We are committed to providing equal employment opportunity for all people and value diversity and inclusiveness.
All qualified applicants will be considered for employment without regard to race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities.
If you require an accommodation to apply, please contact us at hr@ or via mail at 101 Townsend St. San Francisco, CA ***.