Third Party Cyber Risk Manager

Are you passionate about Cyber and Cyber security? Or rather risk assessment and its mitigation? Would you like to work in international environment, where we value your knowledge, domain expertise and proactive execution? If yes, join our team and make the world more resilient by reducing cyber risks for us and our partners.

You will be a part of the Third Party Cyber Risk Management security service. The mission is to reduce the supply chain cyber attack surface and make thus Swiss Re more resilient.

How we achieve that? We:
- identify third parties that represent potential cyber risk for Swiss Re,
- assess their cyber maturity, posture and compliance with security best-practice-standards, specific internal requirements, regulatory obligations to understand the cyber risk exposure,
- propose and address the remediation actions and coordinate the risk mitigation activities,
- make the risk transparent to risk takers and stakeholders to support their risk mitigation/risk acceptance decisions.

You will cooperate with the service recipients across the whole organization, will build up partnerships and interpret them the risks that third party service introduces. You will act as an enabler and coordinator between the stakeholders and the assessment team. Your responsibilities will be assessment of third-party risk at the time of due diligence / onboarding, during the time providing service and prior the termination. You will get insights into many companies all around the world and learn about different approaches to handle cyber risks.

This important role requires deep domain expertise as you have to raise relevant concerns regarding the control framework of a third party and to express the related risks from a business point of view, and in business terms. You collaborate directly with the assessed third parties to develop an action plan to mitigate risks. For this role, you should be able to outline the risks identified, expectations and recommendations to third parties, explain how to improve the control environment and supervise observations through to resolution.

About the Team

You will be a member of Security Services within CSO organization. The Chief Security Officer (CSO) is Swiss Re's central point for security activities, formulates Swiss Re's group-wide security vision and strategy. If you want to contribute directly to Swiss Re's cyber security initiatives, and work together with internal and external stakeholders to improve cyber security, and make cyber risks transparent? Don’t hesitate - this is the role for you.