Third Party Information Security Specialist

Full-time

Employee Status: Regular

Role Type: Hybrid

Department: Information Technology & Systems

Schedule: Full Time

**Company Description**:
Experian is the world’s leading global information services company. During life’s big moments - from buying a home or a car, to sending a child to college, to growing a business by connecting with new customers - we empower consumers and our clients to manage their data with confidence. We help individuals to take financial control and access financial services, businesses to make smarter decisions and thrive, lenders to lend more responsibly, and organisations to prevent identity fraud and crime.

We have 21,700 people operating across 30 countries and every day we’re investing in new technologies, talented people, and innovation to help all our clients maximise every opportunity. With corporate headquarters in Dublin, Ireland, we are listed on the London Stock Exchange (EXPN) and are a constituent of the FTSE 100 Index.

This role takes a lead on complex Third-Party Assurance reviews. **There are three major aspects to this position -**

(1) Conducting reviews of NEW Third-Party entities (Supplier, Reseller, Joint Ventures) - identifying areas of conformance and non-conformance to Experian requirements; driving security contract language and inputs into the Risk Management Process.

(2) Conducting reviews of EXISTING Third-Party entities (Supplier, Reseller, Joint Ventures) - identifying areas of conformance and non-conformance to Experian requirements and inputs into the Risk Management Process.

(3) Supports the Director - Third Party Security UKI and EMAP and VP-Global Head of Third-Party Security to continuously improve the local TPS Management System and ensure that it meets local regulatory, policy and business requirements

**Qualifications**:

- 7+ years of experience in security field specially around security assessments or audit field
- Technical background with prior hands-on experience a plus
- Ability, drive and motivation to research and provide the right guidance and find possible solutions. Ability to push back where the risk outweighs the benefits.
- Curiosity to ask questions and challenge status quo
- Strong leadership skills.
- Excellent verbal and written communication skills.
- Problem Solving & Analysis.
- Process driven, and has eye for detail, automation and efficiency to improve programs/processes.
- Good collaboration, relationship and interpersonal skills.

**Qualifications**:

- Bachelor’s degree in computer science or relevant field or equivalent demonstrable experience
- CISSP, CISA, CISM, PCI QSA, ISO Lead Auditor or comparable certifications preferable
- 7-10 years experience in Information Security, ideally with some knowledge of performing IT/Information Security Reviews

**Additional Information**:
**Dimensions**
- Perform security assessments for new and existing Third Parties using the Third Party Security framework.
- Provide proactive security support and partnership to other teams within Information Security, Governance and the Business
- Partner with regional indirect sales and procurement to ensure procedures meet regional requirements / operating practices.
- Partner with Global TPS colleagues to ensure best practice is shared across all regional teams.
- Identify information security deficiencies, risks and exceptions to appropriate parties as soon as possible.
- Ensure 1LoD ownership and ensure non-compliance issues, exception justification, mitigation and risks are appropriately captured.
- Work with RISOs and other GSOs partners - assist and / or drive remediation activities to mitigate security deficiencies.
- Validate work / peer review of other in region assessments.
- Assist in managing the Third-Party Security inventory and programme within the region.
- Work with 1LoD relationship owners to address BitSIght monitoring alerts.
- Validate work / peer review of assessments.

Experian Careers - Creating a better tomorrow together