ПольшаVendor Due Diligence Specialist
1 нед. назад
Польша
risk managementthird-party assessmentinformation securitysecurity controlsdata flowssystem integration
Perform in-depth security assessments and due diligence on third-party vendors for information security risk management.
О компании
- is a leading global alternative investment firm led by Steven A. Cohen with over $58.5 billion in assets under management (as of July 1, 2026). Building on more than 30 years of investing experience, seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain industry’s brightest talent by cultivating an investor-led culture and committing to our people’s long-term growth. For more information, visit
- Our Warsaw office gives us access to world-class talent with a reputation for excellence and innovation. We're looking to build an office of subject-matter experts whose fresh perspectives will help evolve our infrastructure and advance the capabilities of our teams. Learn more at
Обязанности
- Serve as a technical subject matter expert within our firm’s third-party information security risk management program
- Perform in-depth security assessments of new and existing third parties that access, process, store, or transmit firm information
- Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models
- Analyze business use cases, data flows, system integrations, and technical architectures to establish appropriate risk context
- Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and architecture documentation
- Assess controls across identity, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response, and application security
- Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediation plans
- Produce concise, risk-based assessment reports that explain issue materiality, actual risk, and recommended next steps
- Partner with Technology, Compliance, Legal, Procurement, and other stakeholders to support a consistent third-party risk management process
- Improve assessment methodologies, processes, templates, and metrics while staying current on emerging threats and security practices
Другое
- A Career with 's Technology Team
- As reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.
- As a member of ’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity while delivering real business impact for our multi-billion-dollar global business.
- Five or more years of experience in information security, technology risk, security engineering, security architecture, or third-party risk management
- Experience performing technical security assessments of third-party environments, including evaluating control design, effectiveness, and risk impact
- Bachelor's degree in information security, information systems, information technology, or a related field
- Strong technical understanding of cloud and software-as-a-service environments, identity and access management, network security, vulnerability management, and data protection
- Understanding of logging and monitoring, incident response, application security, and technical control evaluation across complex environments
- Familiarity with industry-recognized security frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001, and SOC 2
- Ability to analyze technical evidence, challenge third-party assertions, and reach independent conclusions about control effectiveness and security risk
- Strong analytical judgment and communication skills, with the ability to explain technical security issues to technical and nontechnical stakeholders
- Ability to work independently, manage multiple assessments, and collaborate effectively across teams
- Commitment to the highest ethical standards
- We invest in our people, their careers, their health, and their well-being. When you work here, we provide:
- Sports card
- Private life insurance
- Private medical and dental care, with vision allowance
- Private pension scheme
- Volunteer opportunities
- Support for employee-led affinity groups representing women, people of color and the LGBT+ community
- Business travel accident insurance
- Employee assistance program
- Educational assistance reimbursement