Security Vendor Analyst - Acxiom (Arkansas)
Acxiom’s Security Vendor Analyst consults with management and teams to verify appropriate security controls are in place and assesses technical operations and processes. This role will be embedded within the Acxiom Security organization and support Acxiom’s Security and Vendor Management program.
• The Security Vendor Analyst reports to the Director, Information Assurance and the Chief Security and Compliance Officer.
• The selected candidate will support the Assurance team is assessing strategic partners, critical vendors and select contracted terms. The program focuses on conducting security and compliance assessments which audit Acxiom’s sourced third-party vendor monitoring companies to establish health metrics for the critical vendors.
• As an integral part of the organization, the Security Vendor Audit Analyst will identify and monitor vendor related risks through collaboration with business owners and maintain all information pertaining to vendor relationships including tracking structured scorecards using defined procedures. Additionally, this role will collaborate with the various areas of the business to help ensure the capture of escalated vendor risks.
• This is a hands-on position where no task is too big or too small. Improving processes and efficiencies is expected through proactive and forward thinking.
• The selected candidate should be a detail-oriented self-starter who can work effectively in a fast-paced environment.
Essential Functions:
+ Performs annual risk assessment and control assurance activity for existing vendor relationships as per policy. Provides guidance to business (vendor) relationship managers on risks and controls gaps and document results according to Information Security Policy, Vendor Management Policy and any related documents.
+ Ensures the timely update and maintenance of all vendor information and documentation, process documentation, job aids and training materials in appropriate departmental repository according to the policy.
+ Collaborates with business (vendor) relationship managers and business owners to request necessary and appropriate due diligence documentation for new and existing vendor relationships based on services being provided. Works directly with business to coordinate due diligence efforts on vendors to include timely follow up of any outstanding issues
+ Works with the vendor and Acxiom’s TPRA vendor to ensure the IT Security Questionnaire is completed.
+ Coordinates with IT Security regarding the review and risk rating of IT Security Questionnaires.
+ Reviews contracts and ancillary documents required of Business (vendor) relationship managers and Legal.
+ Point of contact for questions from the business areas related to vendor management and Regulatory guidance.
+ Addresses reported risk events, potential risk areas, and ensure these are appropriately mitigated, and the mitigation and/or remediation plans are adequate.
What you will do:
+ Collaborate with appropriate risk Subject Matter Experts in functional areas to support the due diligence and risk assessment process
+ Assist in the design and implementation of processes that improve operational performance within the team
+ Assist in developing reports, dashboards and presentations that clearly and accurately capture key performance indicators for Senior Management and business leaders
+ Assist in the testing, implementation and ongoing support of the Security Assessment, Tool and integrated tools to process third party relationships (OneTrust, ServiceNow, Salesforce, InfoHub)
+ Interactions with IPG TPRA processes and reporting
+ Participates in Acxiom’s Monthly Indirect Client & Data Ethics Core Team for reporting and escalations
+ Acxiom Quarterly Risk Council reporting
What you will need:
+ BA/BS in Information Systems, Information Security, Finance, Quality, Audit or Assurance
+ 2-4 years in a Vendor Audit and Assurance, IT Audit, Enterprise Risk, Insurance Audit
+ Hands on, detailed motivated individual with good project management skills
+ Capable of balancing multiple projects while maintaining a high level of responsiveness, client focus, and attention to details
+ Good relationship management skills
+ Previous experience with legal, auditing, third party management, sourcing, and/or related regulatory oversight functions considered an asset
What will set you apart:
+ CISSP certification #GD17
Primary Location City/State:
Conway, Arkansas
Additional Locations (if applicable):
Homebased - Conway, Homebased - Data Center - Little Rock, Homebased - Detroit, Homebased - Ft. Lauderdale, Homebased - New York, Homebased - Partner Site - Birmingham, Homebased - Plano, Independence, New York
Acxiom is an affirmative action and equal opportunity employer (AA/EOE/W/M/Vet/Disabled) and does not discriminate in recruiting, hiring, training, promotion or other employment of associates or the awarding of subcontracts because of a person's race, color, sex, age, religion, national origin, protected veteran, military status, physical or mental disability, sexual orientation, gender identity or expression, genetics or other protected status.
Who is Acxiom?
We are leaders in helping brands achieve the number one mantra for every business – know your customer. For fifty years, we’ve helped marketers deal with a fast-changing future of growing channels, data and technology. By understanding the customer, marketers can communicate with relevance everywhere and drive better customer experiences that build a better brand and, in turn, better business.
We’re one of the marketing industry’s most experienced, respected and forward-thinking leaders. For nearly fifty years, we’ve helped the world’s best marketers understand their customers so that they can reach people with relevance rather than randomness. Our products and solutions form the data foundation that make it possible for marketers to drive better customer experiences and meaningful interactions at scale across every channel.
Our job opportunities will give you the opportunity to showcase your talents, grow your skills, and expose you to cutting-edge technologies, whether you’re an engineer, developer, products guru, systems and security expert, sales and consulting executive, or an intern looking to gain real experience with a company that will make you stand out.
At Acxiom, our values begin with our associates, who are the single most important driver of our success. We’re looking to hire people who share our core values: collaboration, excellence, innovation, a focus on outcomes, and being empowered to make and own decisions that benefit our clients and our company. Our values represent our brand promise – to our clients and to our associates – and define our company culture.
If you are interested in applying for employment with Acxiom and need special assistance or an accommodation to apply for a posted position, contact our recruiting department at 1-877-314-2049.
Attention California Applicants: Please see our California Consumer Privacy Act notice here (http://www.interpublic.com/ccpa-privacy-notice/) .
Attention Colorado Applicants: This position is not located in Colorado but applications for remote work may be considered. For information about this role under CO Equal Pay Law, please contact recruit@acxiom.com
We highly recommend you create an account to monitor your resume submissions. Click on the Sign In link above to create an account or sign up at the end of your application.
Interested in Acxiom? Learn about our Equal Opportunities, job postings, and more:
About Us (http://www.acxiom.com/about-acxiom/)
Follow Us on Twitter
Find Us on Facebook (http://www.facebook.com/AcxiomRecruiting)
Careers Page
LinkedIn (http://www.linkedin.com/company/acxiom)
* This article was originally published here