Third Party Security Risk Analyst in Belfast

Group Overview

The TP ICAP Group is a world leading provider of market infrastructure. Our purpose is to provide clients with access to global financial and commodities markets, improving price discovery, liquidity, and distribution of data, through responsible and innovative solutions. Through our people and technology, we connect clients to superior liquidity and data solutions. The Group operates from more than 60 offices in 27 countries. We are 5,300 people strong.

Role Overview

This role sits within the Global Information Security department which operates as a global team responsible for cyber security at TP ICAP. The Information Security Analyst will have two primary areas of responsibility:

• Performing information security assessments and monitoring of TP ICAP third party suppliers
• Completing and managing inbound client due diligence requests for the Technology function

This role will work closely with a variety of Technology teams, such as application development, infrastructure, networking, and production management.

Role Responsibilities

• Proactively conduct periodic audits to verify third-party supplier security controls, such as:

• Information security control audits on select third-party suppliers with access to TP ICAP employee/client personally identifiable information (PII).
• Perform application-level security architecture reviews on high-risk client applications.
• Monitor third-party supplier penetration testing and annual audit reports (e.g. SOC-2, ISO 27001) on an annual basis.
• Perform regular monitoring and auditing of third-party activities to ensure compliance and adherence to agreed-upon security measures.
• Perform ongoing Security Scorecard monitoring of third-party suppliers.

• Manage the inbound client requests related to Technology and Information Security by engaging with the Client Relationship Management (CRM) function to obtain, organize and package requested information.
• Develop and execute the client information security due diligence process for Technology and maintain accountability for timely / accurate completion.
• Enhance the client information security due diligence process to leverage past responses, reducing cycle time and impact on TP ICAP stakeholders.
• Liaise with client contacts and establish strong relationships with them.
• Look across completed questionnaires to gain insights and formulate control improvement recommendations.
• Manage client due diligence related risk matters such as issues, action plans, risk events, and control attestations.
• Identify areas of non-compliance with Info Sec Policies and Standards, based on completed questionnaires.
• Design, develop and maintain a Fusion specific control library to share with clients and promote the Fusion brand.

Experience / Competences

Essential

• At least two years of Information Security/Risk or Technology experience
• A degree in Technology, Information Security or Computer Science or related field
• Basic knowledge and understanding of Information Security and Technology Risk Management
• Knowledge of basic Information Technology concepts such as applications, databases, networks, and infrastructure
• Strong communication and writing skills
• Strong proficiency with Microsoft Office applications
• Ability to interact effectively with senior IT and Business Management, both within TP ICAP and with clients/suppliers
• Ability to manage time effectively and work with minimal supervision

Desired

• Familiarity with Technology / Information Security assessment methodologies, such as ISAE, ISO, SOC, SIG, etc.
• Audit and/or Risk Management familiarity including concepts such as risks, controls, issues management, etc.
• Ability to consult and make informed decisions in the fields of Information Security and Technology Risk
• Knowledge of financial services and broker/dealer operations
• Desire to pursue industry credentials such as CISSP, CISA, CRISC or a post graduate qualification in a Risk or IT Security related field

Company Statement

We know that the best innovation happens when diverse people with different perspectives and skills work together in an inclusive atmosphere. That’s why we’re building a culture where everyone plays a part in making people feel welcome, ready and willing to contribute.