Urwah Admin

GSSTech Group

<div><p>The Specialist, Vendor Risk Management, is responsible for utilizing intermediate knowledge and skills to execute Third-Party and Vendor Risk management activities. This role involves effectively evaluating, assessing, managing, and reporting on Vendor risks. The candidate will perform the core Vendor risk assessment process, support the Head of Vendor Risk Management with ongoing monitoring, and drive continuous process improvements.</p><h3 class="jobSectionHeader"><b><br>
Key Responsibilities</b></h3><h3 class="jobSectionHeader"><b>
Vendor Risk Assessment &amp; Due Diligence</b></h3><ul>
<li>Perform evaluation of <b>Third Party and Vendor engagements</b> to identify and manage vendor risk.</li>
<li>Complete inherent and <b>overall risk assessments</b>.</li>
<li>Initiate and manage the <b>due diligence process</b> with cross-functional control groups.</li>
<li>Review and score inherent risk questionnaires and complete <b>overall risk assessment summaries</b>.</li>
<li>Serve as the <b>subject matter expert</b> in interpreting requirements and improve awareness of <b>Operational Risks</b> faced by the Business from vendor failure/poor performance.</li>
<li>Work with Strategic Sourcing/Legal/Business to <b>mitigate losses</b> through vendor compensation via robust contracts.</li>
</ul><h3 class="jobSectionHeader"><b>Reporting &amp; Monitoring</b></h3><ul>
<li>Develop and perform reporting for VRM, including <b>data collection, consolidation, analysis, spreadsheets, and dashboards</b>.</li>
<li>Provide and maintain <b>vendor risk reporting mechanisms</b>, and track and report outcomes from vendor management activities.</li>
<li>Support the Head of Vendor Risk Management with <b>reporting and monitoring</b> of vendor risks, including data collection and analysis, and periodic ongoing monitoring.</li>
</ul><h3 class="jobSectionHeader"><b>Process Improvement &amp; Quality</b></h3><ul>
<li>Analyze, update, and modify procedures and processes to identify and continuously implement <b>vendor risk management process improvements</b>.</li>
<li>Complete <b>quality control reviews and testing</b> to ensure procedures are followed.</li>
<li>Stay informed about the latest developments in the <b>vendor risk management field</b>.</li>
</ul><p></p><p><b>
Requirements</b></p><h3 class="jobSectionHeader"><b>
Experience</b></h3><ul>
<li>Minimum of <b>3+ years</b> related work experience in <b>vendor management or vendor risk management</b> is required.</li>
<li><b>Extensive working experience</b> in <b>Business Risk Management, Security Risk, Operational Risk, Internal Audit, and/or Controls related function is preferred</b>.</li>
</ul><h3 class="jobSectionHeader"><b>Knowledge &amp; Skills</b></h3><ul>
<li>Comprehensive knowledge of applicable concepts and methodologies such as <b>continuous quality improvement and auditing experience</b>.</li>
<li>Familiarity with industry compliance standards, such as <b>ISO27001, PCI DSS, SOC1 (SSAE16) and SOC2</b>.</li>
<li>Understanding of <b>governance structures</b> used to manage vendor risk programs and vendor mitigation and oversight.</li>
</ul><h3 class="jobSectionHeader"><b>Education</b></h3><ul><li>
<b>Bachelor&rsquo;s degree</b> in business administration, computer science, or a related field, or equivalent years of experience, is required.</li></ul></div>

Specialist - Vendor Risk Management (VRM)

<div><h3 class="jobSectionHeader"><b>Key Responsibilities</b></h3><ul>
<li>Lead migration of BeyondTrust setup from hardware appliances to virtual machines (VMs) end to end.</li>
<li>Perform upgrades, security patching and post-upgrade stability checks for Appliance, BI, and BIUL components.</li>
<li>Manage and maintain BeyondTrust PAM (BTPAM) infrastructure, including Smart Rules, onboarding workflows, and role-based access controls.</li>
<li>Configure and troubleshoot Active Directory Bridge (ADB) and Privileged Management for Unix/Linux (PMUL).</li>
<li>Define and enforce security policies aligned with compliance standards.</li>
<li>Register APIs and manage Secret Safe configurations.</li>
<li>Onboard Windows, Linux, and network devices, including service accounts and password rotation.</li>
<li>Conduct user access reviews, offboarding, and audit trail analysis.</li>
<li>Configure custom platforms and database connections within BTPAM.</li>
<li>Implement monitoring strategies and handle Breakglass scenarios.</li>
<li>Collaborate with vendor support for issue resolution and case management.</li>
<li>Ensure effective load balancing and backup retention strategies.</li>
<li>Work cross-functionally to support secure access and infrastructure resilience.</li>
</ul><p><b>
Requirements</b></p><h3 class="jobSectionHeader"><b>
Required Skills &amp; Knowledge</b></h3><ul>
<li>Strong understanding of BeyondTrust PAM architecture and operations.</li>
<li>Experience with Active Directory, DNS, and infrastructure validation tools and familiarity with ports, protocols, and networking fundamentals relevant to PAM.</li>
<li>Proven ability to manage user access lifecycle and onboarding workflows.</li>
<li>Knowledge of audit, monitoring, and password rotation features in BTPAM.</li>
<li>Experience troubleshooting high-priority (P1) issues and conducting root cause analysis.</li>
<li>Understanding of Active/Active and Active/Passive architecture concepts.</li>
<li>Ability to define and implement Smart Rules, onboarding rules, and role-based access controls.</li>
<li>Troubleshoot RDP/SSH launch issues and connectivity problems.</li></ul></div><p></p>

Senior Security Engineer - (BTPAM/PMUL)

Overview <p>GSSTech Group is looking for a talented <b>Technical Content Writer</b> to join our dynamic team. The ideal candidate will have a strong background in technology and will be responsible for creating clear, engaging, and informative content that communicates complex technical information to a variety of audiences. You will be involved in writing user manuals, online help documentation, articles, and other collateral that enhances the user experience and provides value to our customers.</p> Responsibilities and Qualifications <ul> <li>Bachelor's degree in English, Communications, Computer Science, or a related field.</li> <li>5-7 years of experience in technical writing or a similar role.</li> <li>Strong understanding of technology, software development, and IT concepts.</li> <li>Ability to communicate complex information in a clear and concise manner.</li> <li>Experience with documentation tools such as MadCap Flare, Adobe FrameMaker, or similar.</li> <li>Familiarity with content management systems (CMS) and version control software, such as Git.</li> <li>Excellent research, writing, editing, and proofreading skills.</li> <li>Knowledge of Agile methodologies is a plus.</li> <li>Strong organizational skills and attention to detail.</li> <li>Ability to work independently and collaboratively within a team environment.</li> </ul> Benefits <ul> <li>Private Health Insurance</li> <li>Paid Time Off</li> </ul>

Technical Content Writer

Join GSSTech Group and explore 3   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

GSSTech Group

ABOUT_COMPANY

Specialist - Vendor Risk Management (VRM)

Senior Security Engineer - (BTPAM/PMUL)

Technical Content Writer