Jobs
>
New York City

    ISSO GRC Third Party Security - New York, United States - Meta Platforms, Inc.

    Default job background
    Description

    We are creating an operationally effective and highly efficient "service of common concern" for all Integrity, Security, Support, and Operations (ISSO) Governance, Risk, and Compliance (GRC) needs, ensuring Integrity, Security, Support, and Operations continue to meet global regulatory requirements and manage risk.

    Meta's ISSO GRC is the central engine driving risk management and compliance at the company, supporting Meta and the family of apps.

    Security engineering is a critical component of supporting integrity and security risk domain governance, risk, and compliance (GRC).

    GRC initiatives are designed to enable the business to proactively manage risk, to protect sensitive information, and to meet or exceed legal and regulatory obligations and expectations.

    We're seeking deeply experienced, integrity and security talent to help enable and safeguard Meta's products and services which have a truly global scale.

    Our goal is to make Meta the premier place to work for governance, risk, compliance, security, and integrity professionals.

    ISSO GRC Third Party Security Responsibilities


    • Collaborate with team members and stakeholders to understand or identify defined work problems and program goals, prioritize deliverables, and discuss program impact.
    Identify and implement opportunities for increased automation across the program factoring in emerging regulations and proactive detection of risks.

    Increase Integration of systems to provision simplified engagements for the business, consolidated and efficient workflows, and consumable view of risk for leadership

    Designing, implementing, and/or assessing security controls

    Validating vulnerability assessments, controls testing outcomes


    Identification of risks and detailing of a mitigation plan to ensure that the project stays on track, or is brought back on track in the event of delays or blockers.

    Providing technical challenge to risk domain strategies, products, designs, features, components.

    Support business travel on an as needed basis (up to 10%)

    Minimum Qualifications


    • 4 + years of experience in information security, cybersecurity, transparency reporting, integrity, and/or technology risk including one or more domains (e.g., access management, vulnerability management, change management, business continuity, application security, asset management).


    2 + years of experience in undertaking and managing programs of work to deliver cyber security assessments that validate the existence and effectiveness of controls to assure the confidentiality, integrity and availability of data held within third party systems.


    2 + years of experience in assessing security deficiencies in information systems and recommending mitigating controls in a corporate environment.

    Negotiates technical capabilities and remediation plans with senior cyber security leaders in third party suppliers.

    Preferred Qualifications


    • BSc/MSc or equivalent experience in Computer Science, Information Systems, Engineering, Cybersecurity or related field
    Experience in technical challenge and validation of controls and features effectively analyzing risk, compliance, and maturity within the context of business, and technology problems

    Experience in effectively analyzing risk, compliance, and maturity within the context of business, and technology problems.

    Industry qualification (CISSP / CISA or similar)

    Locations

    About Meta

    Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world.

    Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology.

    People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today-beyond the constraints of screens, the limits of distance, and even the rules of physics.


    Meta is committed to providing reasonable support (called accommodations) in our recruiting processes for candidates with disabilities, long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.

    If you need support, please reach out to accommodations-$129,000/year to $189,000/year + bonus + equity + benefits

    Individual pay is determined by skills, qualifications, experience, and location.

    Compensation details listed in this posting reflect the base salary only, and do not include bonus, equity or sales incentives, if applicable.

    In addition to base salary, Meta offers benefits. Learn more about benefits at Meta.


  • Omega Ventures Empire, United States

    About the Company · We are a leading, Europe-wide software and consulting company based in Offenbach am Main. We advise companies and integrate IT solutions from exclusive partners as well as our independently developed software products (daccord and inchorus). Our mission is to ...

  • CyberSearch

    Internal Auditor

    4 weeks ago


    CyberSearch New York, United States Contract

    Sr. Internal Auditor · Location: REMOTE · Length: 3-6 months · Start: ASAP · Interview: Video · Third party security risk auditor with experience performing cyber security reviews as part of the oversight of third partiesExecution of internal audit engagements and projects for a ...


  • SMBC Group New York, United States Full time

    The anticipated salary range for this role is between $194,000.00 and $224, The specific salary offered to an applicant will be based on their individual qualifications, experiences, and an analysis of the current compensation paid in their geography and the market for similar ro ...


  • DBI Staffing New York, United States Direct Hire

    We are looking for an Information Security Administrator to assist with the managing, monitoring, and implementing of IT security systems to protect the organization's computer networks from cyber-attacks and other threats and to ensure proper operation. · Essential Duties & Resp ...


  • Federal Reserve System Newark, United States Full time

    Company · Federal Reserve Bank of AtlantaAs an employee of the Atlanta Fed working for the Office of Employee Benefits in Newark, NJ, you will help support our mission of promoting the stability and efficiency of the U.S. economy and financial system. Your work will affect the ...

  • The Goodkind Group, LLC

    Compliance Analyst

    1 week ago


    The Goodkind Group, LLC New York, United States

    Reporting directly to the SVP, Deputy Chief Compliance Officer, the Compliance Analyst will assist with the design and daily responsibilities of the compliance program for Capital Partners, managing a range of legal, regulatory and compliance risks associated with third-party cap ...


  • Phaxis New York, United States

    ***We are seeking a highly skilled Fixed Income Settlements Manager to join our team- Hybrid NYC 40% Remote*** · Responsibilities Include: · Oversee the fixed income settlement department, ensuring all accounts are balanced and settlement issues are promptly resolved throughout ...


  • Cyient New York, United States

    Key accountabilities: · Analyze Program security needs (including laws and regulations), determine security objectives and main security risks strategy · Plan security activities within development life cycle, estimate costs and duration, their impacts related to program execut ...


  • Randstad Digital New York, United States

    Title: Microsoft Systems Engineer / SME & Systems Integrator · Who You Are: · We're looking for a Microsoft Expert / SME (Architect, Engineer, and Operator) to design, build, and run our overall Microsoft Service offering, O365 & Azure, with the ability to lead related enterprise ...

  • On Call Counsel

    Attorney

    2 weeks ago


    On Call Counsel New York, United States

    Job Title: Attorney - Office of Data Privacy · Location: New York, NY · The Agency is seeking full-time contract attorneys for a 6+ month assignment, with potential for long-term extension. · Overview: · The Office of Data Privacy (ODP) provides legal counsel to programs on a wi ...


  • Storm2 New York, United States

    A Principal Security Analyst position is available within our development team, where you will lead our cloud and application cybersecurity strategy. This role is pivotal in ensuring the security and integrity of our software, systems, and data while ensuring compliance with rele ...


  • Planet Technology New City, United States

    SOC Manager · Perm · NYNY · Onsite 2-3 days per week · Day-To-Day · *80-90% managerial responsibilities; 10-20% technical · *Handle escalations of alerts and issues that analysts are unclear on how to resolve or proceed – ie: is this a serious issue that needs to be escalated, po ...


  • Pierce Technology Corporation New York, United States Permanent

    Assume management of the security risk management process. · Lead a team focused on collaborating and helping business units identify their security related risks. · Ensure alignment of security policy, standards, and controls with the enterprise security risk management framewor ...


  • Considine Search New York, United States

    Summary · The Senior Governance Risk & Compliance (GRC) Analyst will ensure the integrity, confidentiality and availability of the Firm's information via risk assessments, audits, controls testing, policy and procedure and compliance initiatives and operational duties. The succes ...

  • Federal Aviation Administration

    IT Specialist

    3 weeks ago


    Federal Aviation Administration Atlantic City, United States

    Summary · Serves as an IT Specialist within the System Security Support Team, NAS Information Security Group, NAS Security and Enterprise Operations (NASEO) Directorate. · Duties · Act as a key security point of contact for assigned activities. Contributes to the preparation of ...


  • Hilltop Securities Inc. New York, United States

    HilltopSecurities is currently looking to hire a Public Finance Support Associate. The Public Finance Support Associate is responsible for the myriad of complex administrative and operational duties associated with the sale and delivery of municipal bond and note securities struc ...


  • Lexitas Legal Talent Outsourcing New York, United States

    Our client, a storied and marquee law firm based in Manhattan, is seeking an Intellectual Property Paralegal to join the firm's Finance Group. This is a hybrid role working out of the firm's Midtown offices. · In this role, the Paralegal will provide primary support to the firm's ...

  • RennerBrown

    Service Desk Analyst

    4 weeks ago


    RennerBrown New York, United States

    Title: Service Desk Analyst · Reports to: US Service Desk Manager · Location: New York, NY · Department purpose and structure · To provide an effective and professional IT 1st line support service to our staff and clients in accordance with the needs of the business. · You will ...

  • Spearmint Rhino

    VIP Host

    4 weeks ago


    Spearmint Rhino New York, United States

    · Job Duties · Help create a professional, upscale, welcoming environment for guests from all walks of life. · Greet and escort customers, and provide personal service to our VIP guests and bottle service guests. · Manage private rooms and VIP tables. · Manage payments and begin ...

  • S&P Global

    Security Architect

    2 weeks ago


    S&P Global New York, United States Full time

    About the Role · : Grade Level (for internal use): · 13 Product engagementIdentify and prioritize critical business functions in collaboration with organizational with business units to understand their security requirements and align security capabilities accordingly.Determin ...