Vendor Due Diligence Specialist

The role

You will serve as a technical subject matter expert within the firm's third-party information security risk management program. You will perform security assessments of third parties and evaluate the effectiveness of their security controls.

What you will do

• Serve as a technical subject matter expert within the firm's third-party information security risk management program
• Perform in-depth security assessments of new and existing third parties
• Evaluate the design and effectiveness of third-party security controls
• Analyze business use cases, data flows, system integrations, and technical architectures
• Review security evidence including assurance reports, certifications, and penetration tests
• Assess controls across identity, cloud, infrastructure, network, vulnerability, data protection, monitoring, incident response, and application security
• Engage third parties and internal technical stakeholders to validate responses and investigate gaps
• Produce concise, risk-based assessment reports
• Partner with Technology, Compliance, Legal, and Procurement stakeholders
• Improve assessment methodologies, processes, templates, and metrics

Required qualifications

• Five or more years of experience in information security, technology risk, security engineering, security architecture, or third-party risk management
• Experience performing technical security assessments of third-party environments
• Bachelor's degree in information security, information systems, information technology, or a related field
• Strong technical understanding of cloud and software-as-a-service environments, identity and access management, network security, vulnerability management, and data protection
• Understanding of logging and monitoring, incident response, application security, and technical control evaluation across complex environments
• Familiarity with industry-recognized security frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001, and SOC 2
• Ability to analyze technical evidence, challenge third-party assertions, and reach independent conclusions
• Strong analytical judgment and communication skills
• Ability to work independently, manage multiple assessments, and collaborate effectively across teams
• Commitment to the highest ethical standards

Benefits

• Sports card
• Private life insurance
• Private medical and dental care, with vision allowance
• Private pension scheme
• Volunteer opportunities
• Support for employee-led affinity groups representing women, people of color and the LGBT+ community
• Business travel accident insurance
• Employee assistance program

About the company

Point72 is a leading global alternative investment firm led by Steven A. Cohen with over $58.5 billion in assets under management. The firm seeks to deliver superior returns through fundamental and systematic investing strategies.