Info Security Analyst

Company: OneMain Financial
Location: New York
Posted on: February 25, 2021

Job Description:

This position will be responsible for facilitating information gathering from Third Parties for cybersecurity due diligence; and performing the subsequent reviews of the materials. The ideal candidate will a have a strong risk background and experience in conducting third party cybersecurity assessments, including: Understand overall third party cybersecurity risk management processes Partner closely with Enterprise Third Party Risk Management team and Relationship Managers to comprehend purpose of third party and level of data access Perform third party cybersecurity due diligence assessments Administer a third party management tool as the central repository for third-party cyber security due diligence assessments and monitoring Ensure third party adherence to, OneMain?s cyber security standards and contractual requirements via performing remote and on-site assessments Assess identified third party cybersecurity findings and assist in identifying appropriate controls to mitigate cybersecurity gaps as well as managing them to closure Complete terminated third party processes and ensure disposal/return of data Other duties as required (e.g. regulatory/audit support, metrics/reporting) Minimum Qualifications Bachelor?s degree or equivalent work experience Strong communication skills, especially in the area of writing will be needed as the individual will need to create reports on their findings. Experience/knowledge of SOC reports, ISO certification, PCI report of compliance and other independent attestation report for service providers is preferred. Experience working with industry frameworks such as CIS Top 20, NIST 800-30, ISO 27002 Knowledge of Gramm Leach Bliley Act (GLBA), Federal Trade Commission (FTC) requirements and guidelines, the New York Department of Financial Services 23 NYCRR 500 Regulation ("NYDFS"), the California Consumer Protection Act ("CCPA"), Payment Card Industry Data Security Standards (?PCI DSS?) Required Knowledge and Skills Demonstrate understanding of cybersecurity controls frameworks Experience in cybersecurity and general risk management Understands complex cybersecurity issues as well as emerging technologies and develop creative solutions while ensuring compliance with cyber security laws and regulations. These laws include Gramm Leach Bliley Act (GLBA), Federal Trade Commission (FTC) requirements and guidelines, the New York Department of Financial Services 23 NYCRR 500 Regulation ("NYDFS"), the California Consumer Protection Act ("CCPA"), Payment Card Industry Data Security Standards (?PCI DSS?), among others. Ability to adapt to change quickly and manage multiple tasks successfully Ability to work across teams to coordinate assessment requirements both within and organization and with outside vendors Experience in risk management, compliance, audit, or third party assessments Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity. Benefits: Because we want our team members to bring us their very best every day, we believe they deserve the right opportunities and benefits. That?s why we packed our comprehensive benefits package for full- and some part-timers with: Health and wellbeing options for team members and their dependents Up to 4% matching 401(k) Tuition reimbursement Continuing education Bonus eligible Paid time off Paid volunteer time And more Our Company: OneMain Financial is the country?s largest lending-exclusive financial company, proudly serving millions of customers with safe, affordable and transparent installment loans. Our customers turn to us every day?online and at 1,500 branches in 44 states?to help them take control and improve their financial lives with solutions for debt consolidation, medical expenses, household bills, home improvements and auto purchases. Our talented and dedicated team members constantly look for responsible ways to serve our customers when, where and how they want. It?s all about doing the right thing?a mission that hasn?t changed for more than 100 years. #LI-DB1

Keywords: OneMain Financial, New York , Info Security Analyst, Professions , New York, New York