About Us: SentinelOne is defining the future of cybersecurity through our XDR platform that automatically prevents, detects, and responds to threats in real-time. Singularity XDR ingests data and leverages our patented AI models to deliver autonomous protection. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed - to defeat every attack, at every stage of the threat lifecycle. We are a values-driven team where names are known, results are rewarded, and friendships are formed. Trust, accountability, relentlessness, ingenuity, and OneSentinel define the pillars of our collaborative and unified global culture. We're looking for people that will drive team success and collaboration across SentinelOne. If you're enthusiastic about innovative approaches to problem-solving, we would love to speak with you about joining our team! What are we looking for? We are looking for a highly motivated, collaborative, and experienced Sr. InfoSec Risk Specialist (Vendor Risk Management) with security throughout mindset who can balance risk, business drivers, and timelines. Reporting to the Director of Governance, Risk & Compliance, this position will be responsible for understanding and supporting the design of SentinelOne's organizational, procedural and technological security controls within the context of the security frameworks applicable to SentinelOne. What will you do? - Perform security risk assessments and audits on vendors. - Develop security questionnaires (e.g. SIG) tailored to vendor's risk tiers, review and manage responses to the security questionnaires. - Review and assess audit reports (e.g. SOC 2) and other reports (e.g. system audit logs, pen tests) - Develop risk mitigation plans for vendors and evaluate security risk tiering/prioritization - Provide risk remediation recommendations that the business and technology may implement to mitigate identified control gaps - Represent the infosec Vendor Risk management team in the negotiation of information security contracts with external third parties/vendors - Work with the legal team in developing and reviewing vendor security contract templates - Participate in internal security and compliance program and track recurring controls, such as SSAE 18 SOC 2, ISO 27001/27002 What skills and knowledge should you bring? - 3+ years of experience working in information security or compliance and vendor risk management - Working experience with ISO 27001, SSAE 16/18 SOC 2, SOX ITGC, GDPR, NIST, and other applicable regulatory compliance frameworks - Ability to discern relevant business and security risks posed by third parties and possess project management skills to prioritize remediation activities based on business criticality, audits, and regulatory requirements to align with business objectives and mitigate impact to the company - Ability to work closely with cross-functional stakeholders - Ability to communicate effectively, in writing and verbally, to target audiences, including customers, partners, auditors, executive management, vendors, and peers - Experience working with both technical and non-technical teams - Ability to prioritize in a highly dynamic work environment Preferred Qualifications: - Bachelor's degree in computer science, information technology, or Information security - Relevant certifications (e.g., ISO 27001 LA/LI, CISA, CISM, CISSP, CEH, CCSK, etc.) - Ability to assess and pragmatically define the scope and relevant controls - Strong desire to learn and continuously develop and deepen technical skills

Delhi NCR

SentinelOne - Senior InfoSec Risk Specialist/Analyst - Vendor Risk Management 

SentinelOne - Senior InfoSec Risk Specialist/Analyst - Vendor Risk Management  ,Job Description for SentinelOne - Senior InfoSec Risk Specialist/Analyst - Vendor Risk Management  in SentinelOne in  Delhi NCR for (5-10) years of experience. Apply Now!

Job Description for SentinelOne - Senior InfoSec Risk Specialist/Analyst - Vendor Risk Management  in SentinelOne in  Delhi NCR for (5-10) years of experience. Apply Now!