IT Security Associate

Description:

This role is responsible for assessing, analyzing, and reporting on security risks related to third party technologies, services, and contractual agreements. As a subject matter expert for information security requirements within the vendor contract review process, the Security Associate will ensure that appropriate security controls, standards, and risk mitigation measures are evaluated and incorporated into third party engagements.

The ideal candidate has foundational knowledge of information security principles, risk frameworks, and third party risk management practices, with the ability to translate technical concepts into clear, actionable insights for both technical and non technical stakeholders. This role requires strong analytical skills, attention to detail, and the ability to collaborate effectively across teams such as Sourcing, Procurement, Legal, Privacy, and various Information Security functions.

Key responsibilities include performing risk based reviews of vendor contracts, enforcing data protection best practices, articulating security risks, and contributing to the development and communication of policies, standards, and procedures. The Security Associate must be organized, self motivated, and capable of managing multiple priorities while maintaining a high level of accountability and professionalism.