Third Party Risk Specialist, Yubico

• Bachelor degree preferred (or equivalent education and experience)
• 1+ years of experience in risk management, information security, or IT Audit
• Proven history communicating with stakeholders both internally and externally
• Proven ability to manage projects and prioritize tasks effectively
• Strong working knowledge of regulatory guidelines and frameworks
• Demonstrated ability to contribute to a continuous learning and process improvement environment
• Proficient working in the Google Workspace productivity suite

Desirable

• Yubico seeks a Third Party Risk Specialist to support Yubico’s compliance and vendor assurance program
• You will be responsible for supporting Yubico’s vendor assurance program, improving our risk posture, and tracking deviations from Yubico standards
• You’ll be a member of the Yubico Enterprise Security (YES) team and responsible for assessing vendor’s information security programs and risk postures in relation to Yubico’s operational requirements
• Additionally, you will regularly review existing deployments and work with internal stakeholders to track and remediate deficiencies
• Perform assessments reviewing data flow diagrams, compliance reports, and policy documents of third party systems, software, and services to validate functionality and compliance with Yubico standards
• Generate reports for non-technical stakeholders identifying risks associated with data handling, business continuity, and other non-compliance with Yubico standards
• Communicate requirements from members of the Security team that include mitigation strategies, process controls, and other success criteria
• Work closely with other members of the Security team to develop technical controls and work programs to assess internal risk postures
• Travel to other offices that include: Stockholm, Singapore, Silicon Valley, and Seattle. Expected travel not to exceed 10%