Third Party Risk Specialist
To see similar active jobs please follow this link: Remote Finance jobs
Meet Yubico: the inventor of the YubiKey––the world's first and leading security key. Our company’s mission is to make secure login easy and available for everyone. Yubico was founded in 2007 by Stina and Jakob Ehrensvard, and recently went public on Nasdaq Stockholm Main Market: YUBICO. Our customers include Fortune 500 companies, hundreds of government agencies and millions of individuals in over 160 countries that rely on Yubico technology to secure access to computers, online services and mobile apps. We are a global company with a strong company culture and employees located in over 14 countries. Yubico’s headquarters are based in Stockholm, Sweden and Santa Clara, CA. Aligned with our mission to make the internet more secure for everyone, Yubico donates YubiKeys to organizations helping at-risk individuals through our philanthropic initiative, Secure it Forward.
At Yubico, we offer:
Freedom and Flexibility: At Yubico, we want you to be your most productive selves whether you decide to work 100% from home or choose to work hybrid/onsite. The way we balance the fast-paced demands of a high-growth company and sustainability is making rest a priority.
Yubico Values: We work to ensure that our employees have an open space to have their voices amplified to create a workplace where everyone feels like they belong. Aligned with this, our employees have created some pretty cool Employee Resource Groups: YubiPride, YubiBIPOC, YubiSustainability and YubiWomen. Additionally, Yubico donates YubiKeys to organizations in need all over the world (you can read more about our work here).
Social Connection: Relationships and connectedness matter, and we love spending time with our team! Our virtual workspace keeps us connected day-to-day whether it's through Yubico celebrating wins or our buzzing Slack communities. We host an all-team event in a new location every year where we plan for upcoming quarters, set goals, and most importantly, host fun events to encourage team building outside of the workplace. Check out our Life at Yubico Page on LinkedIn and our awards here.
The Role:
Yubico seeks a Third Party Risk Specialist to support Yubico’s compliance and vendor assurance program.
You will be responsible for supporting Yubico’s vendor assurance program, improving our risk posture, and tracking deviations from Yubico standards. You’ll be a member of the Yubico Enterprise Security (YES) team and responsible for assessing vendor’s information security programs and risk postures in relation to Yubico’s operational requirements. Additionally, you will regularly review vendor’s implementations and work with internal stakeholders to track and remediate deficiencies. You’ll have an opportunity to work with a diverse set of business and technical teams to understand risks, integrate controls, and produce the documentation necessary to drive adherence with security requirements.
Tasks & Responsibilites:
Perform technical assessments and in-depth evaluations of vendor provided systems, software, and services to validate functionality and compliance with Yubico standards
Review existing vendor controls to identify gaps and areas for improvement
Generate reports for non-technical stakeholders to translate technical requirements into concise actionable insights to business leaders
Develop technical controls and work programs to assess internal risk postures
Basic Requirements:
Bachelor degree preferred (or equivalent education and experience)
3+ years of experience in risk management, information security, or relevant consulting
Excellent communication skills - verbal and written
Proven ability to manage projects and prioritize tasks effectively
Strong working knowledge of regulatory guidelines and frameworks
Demonstrated ability to contribute to a continuous learning and process improvement environment
Proficiency working in the Google Workspace productivity suite
Preferred Skills and Experience:
Experience incorporating controls from Google Cloud, Azure, and AWS
Experience consulting in a technical capacity and familiarity with web application assessments
Experience working in a multinational environment
Ability to travel to other offices that include: Stockholm, Silicon Valley, and Seattle. Expected travel frequency is at least twice per year
$80,000 - $100,000 a year
Yubico offers a holistic Total Rewards package designed to support our employees in all aspects of their life inside and outside of work. This role has the annual salary range of $80,000 to $100,000 for a candidate located in the San Francisco Bay Area. For roles that are filled in other locations, the compensation range will be based on data provided by the Radford McLagan Compensation Database from Aon. Final compensation is also based on a number of factors including, but not limited to, job-related knowledge, skills, and experience.
#LI-Remote
#LI-BR1
Our U. S. benefits are designed for your overall well-being:
Health coverage. We’ve got you covered with top of the line health plans, including dental and vision. We pay 100% of your premium and 85% for your family.
Retirement plan. Our retirement plan includes a 401K dollar per dollar match up to 6% with a cap of $6K/year. Immediate vesting.
Wellness reimbursement. We provide you with $100 monthly reimbursement that you can use on your gym membership, a massage, or your favorite online fitness classes.
Learning and development. We encourage your professional growth and offer a yearly development stipend of $3,000 and mentorship program.
Time off. We offer a total of 15 vacation days plus 10 holidays, and 7 sick days a year.
Paid parental leave. We love welcoming new members to our YubiFamily! You will have 8 weeks paid 100% so you can take care of your new family.
Commuter Benefits. If you need to commute to the office, we offer commuter benefits.
Strong mission & company values. We’re a global team on a global mission to make the internet more secure for everyone. We believe that every person’s work matters. That you should always be nice, stay humble, and have fun, and never take yourself too seriously.
We are an equal opportunity employer, we value diversity and uphold an inclusive environment where all people feel that they are equally respected and valued. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity or expression, age, marital status, religion, national origin, disability, protected Veteran status or any other characteristic protected by law. We'd love to learn about what you can add to our diverse team. We are an E-Verify Participating Employer.
Yubico does not accept agency resumes or referrals so please do not send them to our careers staff or employees. Yubico is not responsible for any fees related to unsolicited resumes or referrals.
Personal data submitted through this form is used for managing Yubico’s recruitment activities, which include facilitating any application you make, setting up and conducting interviews and tests for applicants, evaluating and assessing results and selecting candidates, and as otherwise needed in our recruitment and onboarding processes. The use of your personal data may also be necessary prior to entering into a contract with you (that is prior to offering you a job with Yubico). Your personal data will only be used for the purposes for which it was collected and in accordance with the Yubico Privacy Notice. We only keep your personal data for as long as necessary and in compliance with Yubico’s record retention policies. If you have asked us to, we will keep you informed of other opportunities at Yubico. We do this in various ways, including email and by phone. If at any time you do not want us to contact you or use your information as described herein please contact us at jobs@yubico.com to let us know and we will delete all such information. Providing your personal data is voluntary, but necessary to join our talent community, and if you do not agree to provide your data, we will not be able to consider you as part of our talent community.
As part of providing the requested service, we will transfer your data to be processed by Lever, Inc., a service provider contracted by Yubico AB and/or its subsidiaries that meets legally mandated privacy requirements. The Yubico Privacy Notice offers more information about Yubico privacy practices, including the lawful basis for processing of personal data, how to lodge a complaint with the supervisory authority, and how to contact Yubico to exercise your data subject rights. In this notice, when we refer to 'Yubico', 'us', 'we' or 'our', we mean the Yubico group company or companies that you apply to, or correspond with, and which are responsible for any personal data collected about you.
About the job
Third Party Risk Specialist
To see similar active jobs please follow this link: Remote Finance jobs
Meet Yubico: the inventor of the YubiKey––the world's first and leading security key. Our company’s mission is to make secure login easy and available for everyone. Yubico was founded in 2007 by Stina and Jakob Ehrensvard, and recently went public on Nasdaq Stockholm Main Market: YUBICO. Our customers include Fortune 500 companies, hundreds of government agencies and millions of individuals in over 160 countries that rely on Yubico technology to secure access to computers, online services and mobile apps. We are a global company with a strong company culture and employees located in over 14 countries. Yubico’s headquarters are based in Stockholm, Sweden and Santa Clara, CA. Aligned with our mission to make the internet more secure for everyone, Yubico donates YubiKeys to organizations helping at-risk individuals through our philanthropic initiative, Secure it Forward.
At Yubico, we offer:
Freedom and Flexibility: At Yubico, we want you to be your most productive selves whether you decide to work 100% from home or choose to work hybrid/onsite. The way we balance the fast-paced demands of a high-growth company and sustainability is making rest a priority.
Yubico Values: We work to ensure that our employees have an open space to have their voices amplified to create a workplace where everyone feels like they belong. Aligned with this, our employees have created some pretty cool Employee Resource Groups: YubiPride, YubiBIPOC, YubiSustainability and YubiWomen. Additionally, Yubico donates YubiKeys to organizations in need all over the world (you can read more about our work here).
Social Connection: Relationships and connectedness matter, and we love spending time with our team! Our virtual workspace keeps us connected day-to-day whether it's through Yubico celebrating wins or our buzzing Slack communities. We host an all-team event in a new location every year where we plan for upcoming quarters, set goals, and most importantly, host fun events to encourage team building outside of the workplace. Check out our Life at Yubico Page on LinkedIn and our awards here.
The Role:
Yubico seeks a Third Party Risk Specialist to support Yubico’s compliance and vendor assurance program.
You will be responsible for supporting Yubico’s vendor assurance program, improving our risk posture, and tracking deviations from Yubico standards. You’ll be a member of the Yubico Enterprise Security (YES) team and responsible for assessing vendor’s information security programs and risk postures in relation to Yubico’s operational requirements. Additionally, you will regularly review vendor’s implementations and work with internal stakeholders to track and remediate deficiencies. You’ll have an opportunity to work with a diverse set of business and technical teams to understand risks, integrate controls, and produce the documentation necessary to drive adherence with security requirements.
Tasks & Responsibilites:
Perform technical assessments and in-depth evaluations of vendor provided systems, software, and services to validate functionality and compliance with Yubico standards
Review existing vendor controls to identify gaps and areas for improvement
Generate reports for non-technical stakeholders to translate technical requirements into concise actionable insights to business leaders
Develop technical controls and work programs to assess internal risk postures
Basic Requirements:
Bachelor degree preferred (or equivalent education and experience)
3+ years of experience in risk management, information security, or relevant consulting
Excellent communication skills - verbal and written
Proven ability to manage projects and prioritize tasks effectively
Strong working knowledge of regulatory guidelines and frameworks
Demonstrated ability to contribute to a continuous learning and process improvement environment
Proficiency working in the Google Workspace productivity suite
Preferred Skills and Experience:
Experience incorporating controls from Google Cloud, Azure, and AWS
Experience consulting in a technical capacity and familiarity with web application assessments
Experience working in a multinational environment
Ability to travel to other offices that include: Stockholm, Silicon Valley, and Seattle. Expected travel frequency is at least twice per year
$80,000 - $100,000 a year
Yubico offers a holistic Total Rewards package designed to support our employees in all aspects of their life inside and outside of work. This role has the annual salary range of $80,000 to $100,000 for a candidate located in the San Francisco Bay Area. For roles that are filled in other locations, the compensation range will be based on data provided by the Radford McLagan Compensation Database from Aon. Final compensation is also based on a number of factors including, but not limited to, job-related knowledge, skills, and experience.
#LI-Remote
#LI-BR1
Our U. S. benefits are designed for your overall well-being:
Health coverage. We’ve got you covered with top of the line health plans, including dental and vision. We pay 100% of your premium and 85% for your family.
Retirement plan. Our retirement plan includes a 401K dollar per dollar match up to 6% with a cap of $6K/year. Immediate vesting.
Wellness reimbursement. We provide you with $100 monthly reimbursement that you can use on your gym membership, a massage, or your favorite online fitness classes.
Learning and development. We encourage your professional growth and offer a yearly development stipend of $3,000 and mentorship program.
Time off. We offer a total of 15 vacation days plus 10 holidays, and 7 sick days a year.
Paid parental leave. We love welcoming new members to our YubiFamily! You will have 8 weeks paid 100% so you can take care of your new family.
Commuter Benefits. If you need to commute to the office, we offer commuter benefits.
Strong mission & company values. We’re a global team on a global mission to make the internet more secure for everyone. We believe that every person’s work matters. That you should always be nice, stay humble, and have fun, and never take yourself too seriously.
We are an equal opportunity employer, we value diversity and uphold an inclusive environment where all people feel that they are equally respected and valued. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity or expression, age, marital status, religion, national origin, disability, protected Veteran status or any other characteristic protected by law. We'd love to learn about what you can add to our diverse team. We are an E-Verify Participating Employer.
Yubico does not accept agency resumes or referrals so please do not send them to our careers staff or employees. Yubico is not responsible for any fees related to unsolicited resumes or referrals.
Personal data submitted through this form is used for managing Yubico’s recruitment activities, which include facilitating any application you make, setting up and conducting interviews and tests for applicants, evaluating and assessing results and selecting candidates, and as otherwise needed in our recruitment and onboarding processes. The use of your personal data may also be necessary prior to entering into a contract with you (that is prior to offering you a job with Yubico). Your personal data will only be used for the purposes for which it was collected and in accordance with the Yubico Privacy Notice. We only keep your personal data for as long as necessary and in compliance with Yubico’s record retention policies. If you have asked us to, we will keep you informed of other opportunities at Yubico. We do this in various ways, including email and by phone. If at any time you do not want us to contact you or use your information as described herein please contact us at jobs@yubico.com to let us know and we will delete all such information. Providing your personal data is voluntary, but necessary to join our talent community, and if you do not agree to provide your data, we will not be able to consider you as part of our talent community.
As part of providing the requested service, we will transfer your data to be processed by Lever, Inc., a service provider contracted by Yubico AB and/or its subsidiaries that meets legally mandated privacy requirements. The Yubico Privacy Notice offers more information about Yubico privacy practices, including the lawful basis for processing of personal data, how to lodge a complaint with the supervisory authority, and how to contact Yubico to exercise your data subject rights. In this notice, when we refer to 'Yubico', 'us', 'we' or 'our', we mean the Yubico group company or companies that you apply to, or correspond with, and which are responsible for any personal data collected about you.