Third-party Security Risk Analyst
il y a 1 mois
We’re the forever innovators. On a mission that goes beyond business. Securing digital ownership in a changing world. Unlocking true freedom. We’re revolutionaries.
Looking beyond today. Bridging excellence and pragmatism, with ambition and conviction, to push the limits of what’s possible. That’s what you’ll do here, in this playground of innovation. With leadership and trust, you’ll write the rules of new technology, and create products that redefine security in a digital age.
Founded in 2014, Ledger is the global platform for digital assets and Web3. Over 20% of the world’s crypto assets are secured through our Ledger Nanos. Headquartered in Paris and Vierzon, with offices in UK, US, Switzerland and Singapore, Ledger has a team of more than 500 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets - including the Ledger hardware wallets line with more than 6 millions units already sold in 200 countries.
As a Third-Party Security Risk Analyst at Ledger, you will play a vital role in protecting our organization and our customers from security risks associated with third-party vendors and partners. You will assess, mitigate, and monitor risks throughout the vendor lifecycle to ensure high-security standards, protect data, and secure systems.
**Your mission**:
- Conduct comprehensive security assessments of third-party vendors, including reviewing their security policies, procedures, and controls
- Identify and evaluate security/privacy risks, especially for vendors handling sensitive customer data and critical product supply chain operations.
- Develop and implement risk mitigation strategies to address identified vulnerabilities
- Collaborate with vendors to remediate security gaps and ensure compliance with Ledger's stringent security requirements
- Monitor vendor performance and compliance with security agreements
- Contribute to the development and improvement of Ledger's third-party security risk management program
- Prepare reports and presentations on vendor security risks and mitigation efforts for various stakeholders
**What we're looking for**:
- Degree or equivalent experience in Information Security, Cybersecurity, or a related field
- Minimum 2 years of experience in areas like audit, risk management, compliance or control function
- Strong organizational skills to manage multiple projects and document outcomes effectively
- Familiarity with security frameworks and standards (e.g., ISO 27001, NIST Cybersecurity Framework)
- Analytical and problem-solving mindset with a proactive approach to challenges
- Clear and inclusive communication skills for technical and non-technical audiences
- Experience with security assessment tools and technologies is an asset
- Knowledge of data privacy regulations (e.g., GDPR, CCPA)
- Certifications (e.g., CISSP, CISM, CISA) are welcome
**What’s in it for you**:
- **Equity**: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
- **Flexibility**: A hybrid work policy
- **Social**: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
- **Medical**: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
- **Well-being**: Personal development, coaching & fitness with our dedicated partners
- **Vacation**: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
- **High tech**: Access to high performance office equipment and gadgets, including Apple products
- **Transport**: Ledger reimburses part of your preferred means of transportation
- **Discounts**: Employee discount on all our products
We are an equal opportunity employer for all without any distinction of gender, ethnicity, religion, sexual orientation, social status, disability or age.
-
Third Party Risk Management Officer
Il y a 7 mois
Paris, France twentyAI Temps pleinA- Posted by - Anai Patel- Recruiter twentyAI have partnered with a leading Financial Institution in Paris who are looking for a Third Party Risk Officer to join their function. There is a Third Party Risk management framework being implemented as part of the Ops Resilience framework and it will need to evolved to align with DORA...
-
Project Manager
Il y a 7 mois
Paris, France PiC Temps pleinPerform BAU TPRM activities: - Follow up and coordinate the onboarding of new third parties. - Follow up and coordinate the due diligences activities. - Perform and coordinate TPRM controls. - Maintain the TPRM register up to date and ensure the accuracy of data. - Plan and track the progress of assessments reviews. - Make dashboards and report TPRM...
-
Project Manager
Il y a 7 mois
Paris, France PiC Temps pleinBe a proposition force and drive changes for all TPRM-related topics (new metrics to follow, organization of folders and documents, help other departments with TPRM requirements) At least 5 years of experience working on projects(especially in financial/international environments) Knowledge of financial markets A knowledge of TPRM Perform BAU TPRM...
-
Risk Analyst
il y a 4 jours
Paris, France Amazon France Logistique SAS Temps pleinBachelor’s degree in related field (Data Analytics, International Relations, Global/International Security, Terrorism, Political Science, Business Intelligence, Analytical disciplines etc.) - Experience with information collation, fusion and analytical methodology - Excellent grasp of MS Office Suite and other project management tools - Familiarity and...
-
Operational Risk Manager
il y a 1 mois
Paris, France Market Pay Temps pleinMarket Pay is a fast-growing and profitable Fintech company that provides enterprise payment solutions to globally recognized brands such as Carrefour, Enterprise Rent-a-Car, IBM, Husqvarna, Orange, Tabesto, and many more. With a presence in Belgium, Brazil, Canada, Denmark, France, Italy, Lithuania, Spain, Poland, and the USA, we operate in an international...
-
Chief Security Architect Lead
il y a 3 semaines
Paris, Île-de-France Pernod Ricard Temps pleinPernod Ricard is a dynamic and innovative global wine and spirits company looking for a seasoned Cybersecurity Architecture Expert to lead its security architecture efforts. As a critical member of the Global Tech team, you will be responsible for designing and implementing the company's security architecture, ensuring alignment with industry best practices...
-
Security Governance Associate
Il y a 6 mois
Paris, France Contentsquare Temps pleinContentsquare is a global digital analytics company empowering the brands you interact with every day to build better online experiences for all. Since our founding in France in 2012, we have grown to be a truly global and distributed team - known as the CSquad - representing more than 70 nationalities across the world. In 2022, we raised $600M in Series F...
-
Information Security Specialist
Il y a 7 mois
Paris, France Fast Retailing Temps pleinFast Retailing is a global company that operates multiple fashion brands including UNIQLO, Comptoir des Cotonniers, Princesse Tam Tam, Theory and more. As the world’s third-largest manufacturer and retailer of private-label apparel, the Fast Retailing Group offers high-quality, reasonably-priced clothing by managing everything from procurement, design, and...
-
Kys Analyst
Il y a 7 mois
Paris, France Trustpair Temps pleinTrustpair is reinventing B2B payment security. We are building the leading anti-fraud solution for large corporations, to help them avoid $20 billion in fraud every year. With Trustpair, finance teams work with accurate data to avoid the risk of fraud and proceed to payments with peace of mind. Trustpair at a glance: - 200+ companies preventing B2B payment...
-
Information Security Analyst
il y a 4 semaines
Paris, France Datadog Temps pleinThe Customer Trust team is the face of Datadog's security organization. Members of the Customer Trust team interact directly with our customers, and translate customer security and compliance requirements into the overall Datadog information security program. You will support the sales organization in the procurement phase and ongoing vendor management...
-
Corporate Security Advisor
Il y a 7 mois
Paris, France SGS Temps pleinCompany Description We are SGS - the world’s leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 98,000employees operate a network of 2,650 offices and laboratories, working together to enable a better, safer and more interconnected world. **Job Description**: As...
-
Information Security Data Privacy Manager France
il y a 1 semaine
Paris, France UNIQLO Temps pleinUNIQLO is a leading brand of the Fast Retailing Group, one of the largest apparel retailers in the world. UNIQLO respects the individuality and lifestyle of all customers and takes pride in creating high quality, long-lasting, innovative clothing at an affordable price. We are currently recruiting for an Information Security Specialist (Business Analyst and...
-
Security Officer
il y a 7 jours
Paris 9e, France AVIV Group Temps pleinCompany DescriptionWe’re one of the world’s largest privately owned real estate tech companies and a subsidiary of Axel Springer. Our mission is to unlock everyone’s perfect place! Some of Europe’s best known digital real estate marketplaces and brands form part of our Group, they are: Meilleurs Agents, Groupe SeLoger, Immoweb, Immowelt, Housell and...
-
Security & Facilities Manager
Il y a 2 mois
Paris, France Sotheby's Temps plein**ABOUT SOTHEBY'S** Established in 1744, Sotheby's is the world's premier destination for art and luxury. Sotheby's promotes access to and ownership of exceptional art and luxury objects through auctions and buy-now channels including private sales, e-commerce and retail. Our trusted global marketplace is supported by an industry-leading technology platform...
-
Security & Facilities Manager
Il y a 2 mois
Paris, France Sotheby's Temps plein**ABOUT SOTHEBY'S** Established in 1744, Sotheby's is the world's premier destination for art and luxury. Sotheby's promotes access to and ownership of exceptional art and luxury objects through auctions and buy-now channels including private sales, e-commerce and retail. Our trusted global marketplace is supported by an industry-leading technology platform...
-
Information Security Analyst II, Customer Trust
il y a 4 semaines
Paris, France Datadog Temps pleinThe Customer Trust team is the face of Datadog's security organization. Members of the Customer Trust team interact directly with our customers, and translate customer security and compliance requirements into the overall Datadog information security program. You will support the sales organization in the procurement phase and ongoing vendor management...
-
Information Security Analyst II, Customer Trust
il y a 4 semaines
Paris, France Datadog Temps pleinThe Customer Trust team is the face of Datadog's security organization. Members of the Customer Trust team interact directly with our customers, and translate customer security and compliance requirements into the overall Datadog information security program. You will support the sales organization in the procurement phase and ongoing vendor management...
-
Information Security Senior Risk Officer
il y a 5 jours
Paris, France Glocomms Temps pleinOur client is searching for a CISO to steer the companies security strategy for the financial services industry. Responsible for protecting sensitive data, ensuring regulatory compliance and minimizing cyber risks, the CISO plays a key leadership role. You will define and implement information security strategy, ensuring the protection of the customers...
-
Information Security Senior Risk Officer
il y a 4 jours
Paris, France Glocomms Temps pleinOur client is searching for a CISO to steer the companies security strategy for the financial services industry. Responsible for protecting sensitive data, ensuring regulatory compliance and minimizing cyber risks, the CISO plays a key leadership role. You will define and implement information security strategy, ensuring the protection of the customers...
-
Alternance Security Officer
Il y a 7 mois
Paris, France AXA Partners Temps plein**First steps in Security Risk Management throughout our main security services** - Understand and become autonomous in main GSC security services delivery such as, for example: - Data Classification - AISRA: Application Information Security Risk Assessment - 3rd party security due diligence - 3rd party security audit - Diverse security audits preparation -...
