Job Description

The Impact you will have in this role:

In this role, you will support the Cyber Security Due Diligence SME team within the Cyber Security Risk Office (CSRO), responsible for overseeing technology, cyber security, and operational resilience risk assessments across DTCC's third party ecosystem. Your work will directly contribute to strengthening DTCC's Third Party Risk Management program by ensuring effective identification, assessment, monitoring, and remediation of cyber and technology risks associated with vendors, service providers, and other external partners.
You will work closely with Business, Technology, Legal, Sourcing, Resilience, and Risk Management stakeholders to perform due diligence assessments, third party onboarding activities, control gap remediation, onsite reviews, and specialized assessments, including fourth party risk, NYSDFS cybersecurity reviews, encryption key management, and software supply chain security. The role is also responsible for advancing third party cyber risk reviews, enhancing assessment methodologies, and supporting regulatory compliance.

Your Primary Responsibilities:
• Conduct technology, cyber security, operational resilience, and specialized risk assessments of third parties supporting DTCC's critical services
• Provide subject matter expertise on third-party cyber risk management, emerging regulatory requirements, and industry best practices, including NYSDFS Cybersecurity Regulation, operational resilience requirements, software supply chain risk, fourth-party risk, and encryption key management
• Partner closely with Sourcing, Legal, Enterprise Program Management, Architecture Review Board (ARB), Technology, Resilience, Security, and Business stakeholders to support third-party onboarding, contract reviews, and risk-based decision making
• Perform remediation efforts for identified third party control gaps and assessment findings, ensuring appropriate accountability, transparency, and timely risk reduction
• Build strong relationships with internal and external stakeholders. Partner with other internal stakeholders on third party risk activities. Participate in discussions with internal and external stakeholders to plan and execute on process enhancements
• Demonstrate effective written and verbal communication skills, active engagement in meetings and thought leadership. Provide guidance to internal stakeholders on processes and address issues and inquiries timely.
• Prioritize multiple tasks and initiatives. Lead the execution of Third Party Risk Management frameworks and manage project tasks effectively.
• Demonstrate and apply a thorough understanding of risk management processes and activities, with specific focus on key third party risks. Viewed as a subject matter expert.
• Aligns risk and control processes into day to day responsibilities to monitor and mitigate risk; escalates appropriately
• Ensure third-party cyber risk management activities support DTCC's overall risk ma

Qualifications:

• Minimum of 6 years of related experience
• Bachelor's degree preferred or equivalent experience

Talents Needed for Success:

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations.