Cognizant’s Corporate Security team is chartered with managing and directing the global enterprise physical and information security programs. The team is responsible for the oversight and coordination of security efforts across the company, including information technology, human resources, communications, legal, facilities management and other groups, and is responsible for identifying security initiatives and standards. Corporate Security drives security compliance and serves as the key organization responsible with helping the business appropriately manage security risks.
Coordination and collaboration of IT groups, Information Security teams, business units, and client delivery teams.
Responsibilities
Lead and/or participate in the Vendor Risk Management Review process including the development & review of assessment procedure (SOP’s)
Perform Vendor Risk assessments on potential and existing third-party vendor relationships; taking into consideration strategic, reputation, compliance, and other risks the vendor may pose to Cognizant.
Conduct thorough due diligence activities including but not limited to various industry recognized security frameworks (ITGC, ISO 27001, Privacy (GDPR/CCPA), Review security language in contract/MSA and manage SLA's.
Identify, measure, assess and manage risk associated with third party vendor relationships, and as needed, liaise with the business owners to identify/establish mitigation approach.
Lead and/or participate in communicating identified risks with key stakeholders to initiate and subsequently drive remediation efforts related to assessments with the business/third parties
Ensure all required contracts have undergone proper legal and compliance reviews.
Drive all aspects of risk assessment process for third party providers.
Maintain a central vendor repository to record and capture data, artifacts and reports for all assessments performed.
Ensure quality, accuracy, and integrity in various tasks as part of the overall vendor Risk Management process
Identify opportunities for improving third party risk posture as well as Cognizant’s third-party risk management processes.
Support internal and external audits as and when necessary
Review and maintain documentation of the process, procedures, reports and VRM metrics
Lead and manage teams to drive the vendor risk management process to meet the stakeholder expectation.
Strong team player who collaborates well with others to solve problems and actively incorporate input from various sources
Requirements
Experience with working on global teams across time zones and cultures
7-10 years of proven experience in Vendor Risk Management including governance, audit, or risk management related experience
Hands on experience in industry recognized tools -ServiceNow
Experience with onboarding third party in different categories including but not limited to IT outsourcing, Integration, Resellers, Recruitment, SaaS, logistics etc.
Knowledge of international standards and regulatory guidelines (ISO 27001, Privacy (GDPR/CCPA), NIST CSF, PCI-DSS, Service Organization Control (SOC), HIPPA)
The ability to articulate a clear understanding of Third-Party Risk and/or Vendor Management best practices
Proficient technical skills, including: Information Security Audit, Network Security, change management, IT Risk Management, performance metrics and reporting, project management, and vendor management.
Bachelors with overall 10+ plus years of work experience including 8+ in Vendor Risk Management
Personal Characteristics
Ability to think strategically; work with a sense of urgency and pay attention to detail
Ability to present complex solutions and methods to a general community
Independent thinking, willingness to "step outside the box" and take reasonable, calculated risks
Excellent written and verbal communication and organizational skills in English and Norwegian
Strong collaboration skills and willingness to be a team player to solve problems and