Security Risk Management Consultant

Responsibility: The selected consultants will be responsible for: • Conducting Third-Party Risk Management (TPRM) and Vendor Risk Assessments. • Performing Vendor Due Diligence reviews and security assessments. • Conducting security control reviews and control gap assessments. • Assessing technology, cybersecurity, and information security risks associated with third parties. • Reviewing cloud security controls and cybersecurity compliance requirements. • Supporting outsourcing risk management and governance activities. • Preparing risk assessment reports, findings, and remediation recommendations. • Engaging stakeholders and presenting assessment outcomes. • Supporting compliance with MAS Technology Risk Management expectations and banking regulatory requirements. Key Skills Required • Third-Party Risk Management (TPRM) • Vendor Risk Management and Due Diligence • Security Assessments and Control Gap Assessments • Technology Risk, Information Security, or Cybersecurity • Cloud Security and Cybersecurity Controls • Strong Analytical, Documentation, and Stakeholder Management Skills • Familiarity with MAS Technology Risk requirements is preferred