The Opportunity

We are seeking a Third-Party Analyst to join our Cyber Third-Party team. You will join a highly collaborative, fast paced team focused on assessing and mitigating third-party risk. This role will require collaboration across multiple disciplines, excellent communication and documentation skills, and an understanding of information security best practices. As a member of the team, you will strive to ensure the protection of MassMutual’s customer and corporate data in line with enterprise risk practices.

The Team:

As a member of the team, you will strive to ensure the protection of MassMutual’s customer and corporate data in line with enterprise risk practices.

The Impact:

The key responsibilities as a member of the Cyber Third-party Team include, but are not limited to, the following:

Perform third-party risk assessments to ensure third parties meet minimum security standards based on the overall risk of the third-party.Research and consult with internal subject matter experts to understand and document risk identified through risk assessments and due diligence processes; and communicate the findings to stakeholders.Support and create third-party risk reports and key risk metrics to assist with the coordination and communication of third-party risks to stakeholders and business partners.Evaluate, document, communicate and drive incident response activities related to a cyber event at a MassMutual Third-Party.Collaborate with stakeholders, business partners, and other subject matter experts to continuously improve the cyber third-party risk processes.Document and maintain policies, procedures, security best practices as related to third-party risk management and effectively communicate any changes to the stakeholder community.

The Minimum Qualifications

Associate's degree in Computer Science, Information Security, or related field.3+ years of experience in IT Support, Information Security, or related field.

The Ideal Qualifications

Bachelor’s degree in computer science.Relevant Cybersecurity Certifications and or willingness to pursue certifications: CISSP, CRISC, CISA, CTPRP, CTPRA.Solid understanding of GRC controls, risk management, compliance practices, IT standards and Financial Services regulations.Working knowledge of NIST 800-53 (National Institute of Standards & Technology) and NIST CSF Controls.Functional knowledge of cloud environments such as AWS and Azure.Proven understanding of complex technical systems and the business processes they support, combined with an ability to synthesize the relevant risks/ controls, and explain the security issues to all stakeholders.Excellent communication skills (verbal and written) to interact effectively, establish credibility and influence at all levels.Strong analytical abilities and critical thinking skills.Ability to compile reports, summaries, and presentations to communicate findings to key stakeholders across the organization.Demonstrated success as a team player with the ability to work in a collaborative, fast-paced environment.Familiarity with GRC platforms such as Archer, ProcessUnity, Onspring, etc.Familiarity with third-party continuous monitoring solutions such as Bitsight, RiskRecon, or Security Scorecard.Solid understanding of cybersecurity principles, core frameworks, and industry best practices.Strong oral and written communication skills, proven technical abilities and strong computer skills.

What to Expect as Part of MassMutual and the Team

Regular meetings within the Cyber Third-Party Team.Focused one-on-one sessions with your manager.Access to mentorship opportunities.Networking opportunities including access to Asian, Hispanic/Latinx, African American, women, LGBTQIA+, veteran and disability-focused Business Resource Groups.Access to learning content on Degreed and other educational platforms.Your ethics and integrity will be valued by a company with a strong and stable ethical business with industry leading pay and benefits.

#LI-RK1

MassMutual is an Equal Employment Opportunity employer Minority/Female/Sexual Orientation/Gender Identity/Individual with Disability/Protected Veteran. We welcome all persons to apply. Note: Veterans are welcome to apply, regardless of their discharge status.

If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need. EEO Statement (Opens in new window)

MassMutual will accept applications on an ongoing basis until such time as a candidate has been offered employment. The job description includes the main duties of this position, which may evolve over time. You may be required to perform other duties not listed.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment.

Salary Range: $84,100.00-$110,300.00