Sr Analyst II- Cyber Supply Chain Management
Location
Kochi | India
Job description
Job Overview
Position Overview The Cyber Supply Chain Risk Management (CSCRM) Analyst is a cross-functional role responsible for managing the coordination and review of suppliers working with Hubbell. Working within the Third-Party Risk Management Tool, creation, assignment and reviewing the supplier security controls will be a primary deliverable. Communication of the risk assessment results with the internal supplier requestor and needed security controls will be critical to the success of this role. This position partners closely with Sourcing, Security, Legal, IT and Product Development teams to ensure suppliers are adequately secure for Hubbell to conduct business with them.
A Day In The Life
Duties And Responsibilities - Represent Hubbell in the supply chain, including Hubbell as a customer (upstream) and Hubbell as a supplier (downstream)
- Responsible for conducting successful vendor risk assessments using the Cyber Supply Chain Risk Management (CSCRM) process in place
- Works towards strengthening the CSCRM process with continuous improvements, awareness, and adoption across Hubbell's business units
- Excels in the cross functional team environment
- Communication of vendor risk assessment results to internal teams.
- Collaborate with Hubbell Security team on recommended action plans based on result of vendor risk assessments.
- Coordinates with internal business requestors to review supplier SOC 2 reports per existing process.
- Improve and communicate metrics on vendor risk assessment progress to Hubbell Security team.
- Ensure compliance with policies and standards for Cyber Supply Chain Risk Management and Service Provider Compliance Review.
- Continues personal development and education to remain informed of current industry development and technologies.
What will help you thrive in this role
Qualifications & Skills - 2-3 years of experience in the Information security, operational or vendor risk management
- Solid understanding of the risk management framework(s), supply chain dependencies and risk mitigation requirements
- Hands on technical experience in implementing general technology security controls (IT and connected devices)
- Understanding of the legal agreements, third party assurance, compliance, risk mitigation and incident response processes
- Effective communications abilities with internal teams to assist them in learning security control requirements and risks to the organization.
Education Bachelor's Degree in a Technical Focus area or Other
Competencies
Communicating and Influencing
Initiative and Drive
Global Business Acumen
Planning, Organizing, and Decision Making
Technology Agility
Job tags
Salary
