Vendor Risk Analyst
About the role
Splunk is the leader in big data, machine learning analytics with a significant presence in the cyber security market. In today’s business climate, organizations need to engage third parties to remain competitive and optimize internal operations. All of these relationships introduce various levels of risk to an organization, which requires close management and monitoring. Splunk is seeking a Third Party Risk Analyst to join our Splunk Global Security (SGS) team to grow and mature our Vendor Trust Program. In this role you will perform due diligence review and risk assessments associated with third-party solutions and services, and communicate the risk assessment results to our internal business partners empowering them to make informed decisions in order to manage the risk in alignment with their business objectives and risk appetite. Perform due diligence on vendor solution implementation to ensure the vendor product is configured securely.
Responsibilities
- Conduct detailed vendor risk assessments, working closely with key partners, to identify and evaluate risks before establishing or continuing operations with third-party vendors. Partner with other Vendor Risk Analysts to determine the risk rating with qualifications based on the potential impact and likelihood.
- Develop and maintain high-quality risk assessment documentation covering findings, risk statements, risk ratings, justifications and recommendations in the Splunk GRC tool and risk register.
- Assist with validation of the implementation of technical vendor solutions.
- Use a risk-based approach to conduct reassessment of vendors periodically and monitor third-party vendors’ security practices and compliance with contractual obligation.
- Contribute to process improvements to continuously mature the Third-Party Risk Management Program and service. Champion the program mission and value proposition throughout the organization.
- Triage system output to identify security risks with vendor solutions and/or implementation configuration.
- Assist in the response to emerging threats by coordinating with vendors to understand supply chain impact.
- Develop documentation for the Vendor Trust team processes.
- Keep the Security Vendor Risk Assessment workflow running effectively, by kicking off new vendor assessments, responding to vendor questions, and collecting evidence for audits.
- Build team camaraderie and contribute to Splunk values.
- Laugh at our jokes.
Requirements
- Technical Bachelor degree in Computer Science, Information Security, or similar technical field of study or equivalent practical experience in third-party risk management and/or cyber risk management.
- Demonstrate basic knowledge of information security risks and countermeasures and PCI, HIPAA, SOC2, ISO 27002, FedRamp and other information security and control frameworks.
- Understanding of security concepts including the ability to assess the security aspects of the following: network devices, firewalls, intrusion detection/prevention systems, identity services, web applications, encryption, forensic analysis, penetration/vulnerability tools, Linux/windows/macOS, virtualization, desktop/laptop and mobile devices.
- Demonstrate an understanding of business processes, internal control risk management, IT controls, and how they interact together.
- Strong analytical, problem solving, documentation, and time management skills. Strong relationship and facilitation skills. Good communication and native english language proficiency.
- Work both independently and as part of a team.
- Preferred: One or more of the following certifications CISA, CISM, CISSP, CRISC. Knowledge of cloud infrastructure, applications and coding practices.
- Ability to work in structured and unstructured environments while focusing on big picture objectives among day to day responsibilities.
We value diversity, equity, and inclusion at Splunk and are an equal employment opportunity employer. Qualified applicants receive consideration for employment without regard to race, religion, color, national origin, ancestry, sex, gender, gender identity, gender expression, sexual orientation, marital status, age, physical or mental disability or medical condition, genetic information, veteran status, or any other consideration made unlawful by federal, state, or local laws. We consider qualified applicants with criminal histories, consistent with legal requirements.
This is a test line.
About Splunk
Splunk was founded to pursue a disruptive new vision: make machine data accessible, usable and valuable to everyone. Machine data is one of the fastest growing and most complex areas of big data—generated by every component of IT infrastructures, applications, mobile phone location data, website clickstreams, social data, sensors, RFID and much more.
Splunk is focused specifically on the challenges and opportunity of taking massive amounts of machine data, and providing powerful insights from that data. IT insights. Security insights. Business insights. It’s what we call Operational Intelligence.
Since shipping its software in 2006, Splunk now has over 13,000 customers in more than 110 countries around the world. These organizations are using Splunk to harness the power of their machine data to deepen business and customer understanding, mitigate cybersecurity risk, prevent fraud, improve service performance and reduce costs. Innovation is in our DNA – from technology to the way we do business. Splunk is the platform for Operational Intelligence!
Splunk has more than 2,700 global employees, with headquarters in San Francisco, an office in San Jose, CA and regional headquarters in London and Hong Kong.
We’ve built a phenomenal foundation for success with a proven leadership team, highly passionate employees and unique patented software. We invite you to help us continue our drive to define a new industry and become part of an innovative, and disruptive software company.
Benefits & Perks: Wow! This is really cool!
SF Only
Medical, full company paid Dental, Vision and Life Insurance, Flexible Spending and Dependent Care Accounts, Commuter Accounts, Employee Stock Purchase Plan (ESPP), 401(k), 3 weeks of PTO, sick leave, stocked micro kitchens in Splunk offices, catered lunches on Mondays, catered breakfast on Fridays, basketball hoops, ping pong, arcade games, BBQ’s, soccer, “Fun Fridays”.
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Non SF
Medical, full company paid Dental, Vision and Life Insurance, Flexible Spending and Dependent Care Accounts, Commuter Accounts, Employee Stock Purchase Plan (ESPP), 401(k), 3 weeks of PTO and sick leave. Our work environments vary by location however we believe in hosting amenities and fun activities to fuel our energy. You may find fully stocked micro kitchens, catered lunches on Mondays and breakfast on Fridays, basketball hoops, ping pong, arcade games, BBQ’s, soccer and “Fun Fridays”.
This isn’t a job – it’s a life changer – are you ready?
Individuals seeking employment at Splunk are considered without regards to race, religion, color, national origin, ancestry, sex, gender, gender identity, gender expression, sexual orientation, marital status, age, physical or mental disability or medical condition (except where physical fitness is a valid occupational qualification), genetic information, veteran status, or any other consideration made unlawful by federal, state or local laws. Click here to review the US Department of Labor’s EEO is The Law notice. Please click here to review Splunk’s Affirmative Action Policy Statement.
Splunk does not discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Please click here to review Splunk’s Pay Transparency Nondiscrimination Provision.
Splunk is also committed to providing access to all individuals who are seeking information from our website. Any individual using assistive technology (such as a screen reader, Braille reader, etc.) who experiences difficulty accessing information on any part of Splunk’s website should send comments to [email protected]. Please include the nature of the accessibility problem and your e-mail or contact address. If the accessibility problem involves a particular page, the message should include the URL of that page.Splunk doesn't accept unsolicited agency resumes and won't pay fees to any third-party agency or firm that doesn't have a signed agreement with Splunk.
To check on your application click here.