Third-Party Security Risk Analyst (f/m)

We are seeking a qualified individual to join our team at Ledger, a global leader in digital assets and Web3 technology. As a Third-Party Security Risk Analyst, you will be responsible for safeguarding our organization and clients from security risks related to third-party vendors and partners.

Responsibilities:

• Conduct thorough security evaluations of third-party vendors, assessing security policies, procedures, and controls.
• Identify and assess security and privacy risks, particularly for vendors handling sensitive data and critical operational aspects.
• Develop and execute strategies to mitigate identified vulnerabilities.
• Work collaboratively with vendors to address security deficiencies and ensure compliance with Ledger's security standards.
• Monitor vendor performance and adherence to security agreements.
• Contribute to enhancing Ledger's third-party security risk management program.
• Prepare and deliver reports and presentations on vendor security risks and mitigation efforts to relevant stakeholders.

Requirements:

• Bachelor's degree or equivalent experience in Information Security, Cybersecurity, or a related field.
• Minimum of 2 years of professional experience in audit, risk management, compliance, or control functions.
• Strong organizational abilities to handle multiple projects and effectively document outcomes.
• Familiarity with security frameworks and standards such as ISO 27001 and NIST Cybersecurity Framework.
• Analytical and problem-solving skills with an proactive approach to challenges.
• Effective communication skills for both technical and non-technical audiences.
• Experience with security assessment tools and technologies is advantageous.
• Knowledge of data privacy regulations like GDPR and CCPA.
• Certifications such as CISSP, CISM, or CISA are a plus.

Benefits:

• Stock options provided to allow employees to take part in the company's success.
• Hybrid work policy offering flexibility.
• Company outings and social events, along with snacks and drinks.
• Comprehensive health insurance including medical, dental, and vision coverage.
• Personal development opportunities, coaching, and fitness programs.
• Five weeks of paid leave per year, in addition to holidays and RTT days.
• Access to high-tech office equipment, including Apple products.
• Ledger reimburses part of transportation costs.
• Employee discount on all Ledger products.

We are committed to being an equal opportunity employer, valuing diversity and inclusion without regard to gender, ethnicity, religion, sexual orientation, social status, disability, or age.