Connecting Odds
HCLTech

Specialist - Customer Care

HCLTech
Gurugram, Haryana, IndiaPosted 23 days agoDiscoveredMatch locked

About the role

jobColumnOne" role="region" aria-labelledby="jobColumnOneRegion" style="width:50%;"> Job Description Specialist - Customer Care Gurugram, Haryana

Job Summary

We are seeking a highly skilled

Vendor Security Assessment Engineer

to evaluate and ensure the security posture of third-party vendors, partners, and suppliers. This role involves assessing vendor compliance with security policies, industry standards, and regulatory requirements. The ideal candidate will have a strong background in cybersecurity, risk assessment, and vendor management.

Key Responsibilities

  • Conduct security assessments of third-party vendors, identifying risks and recommending mitigations.
  • Evaluate vendor compliance with security frameworks such as ISO 27001, NIST, SOC 2, GDPR, and other relevant regulations.
  • Review penetration testing reports, cloud configuration reports, and report findings.
  • Perform security due diligence and risk analysis for vendor onboarding and ongoing vendor relationships.
  • Collaborate with internal teams, including procurement, legal, and IT security, to ensure security requirements are met.
  • Develop and maintain security assessment questionnaires and methodologies.
  • Monitor vendor security incidents and work with vendors to resolve security gaps.
  • Provide recommendations for vendor risk remediation and track progress.
  • Maintain documentation of security assessment results and provide regular reports to management.
  • Stay up to date with emerging security threats and industry best practices.

Skill Requirements

  • Bachelor’s degree in Computer Science, Information Security, or a related field.
  • 3+ years of experience in security risk assessment, vendor risk management, or cybersecurity.
  • Strong understanding of security frameworks and regulatory compliance requirements.
  • Ability to analyze security policies, architecture, and controls of third-party vendors.
  • Excellent communication and interpersonal skills.
  • Relevant security certifications (e.g., CISSP, CISA, CISM, CRISC, or equivalent) are a plus.

Preferred Qualifications

  • Experience working in a cloud security environment (AWS, Azure, GCP).
  • Familiarity with third-party risk management tools and platforms.
  • Knowledge of data privacy laws and secure data handling practices.
  • Experience in contract review from a security and compliance perspective.

Apply now

<div class="

Not included in the source posting: about the role, benefits.

Skills

cybersecurityawsazurecisspgcppenetration-testingsoc

Who can apply

The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.

Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.

Apply