Team Leader- Technology Services

Requirements

Description and Requirements

Position Summary

To perform end to end IT third party cyber risk assessments, which includes Vendor Due Diligence, Risk Identification and Analysis, Archer Management, Reviewing the vendor's questionnaire, Control Mapping, Third party audit report review, Findings and Exceptions Management, Risk Mitigation and Periodic Reviews and various Contracts negotiations; on MetLife's vendor and other third party organizations to ensure adherence to security and compliance requirements.

Job Responsibilities

• Conduct end to end IT third party vendor risk assessments over third party vendors, including but not limited to : determining the scope of the service provided by interacting with MetLife Senior Management and business point of contacts; administering risk assessments directly to vendors using our online GRC tool; examining responses to determine the extent of risk the relationship represents to MetLife; performing gap assessments on the vendor's control environment; reviewing vendor's third party audit reports; offering recommendations to Vendor and MetLife's management on the risk incurred, and on how to respond to any risks; and generating risk findings.
• Assess and respond to risk findings, including pursuing action plans to completion and negotiating due dates with vendors;
• Provide guidance to the business, Strategic Sourcing and other stakeholders to ensure requirements of VRM are fully understood
• Perform security assessments of systems, applications, data centers, infrastructures and service providers using an established framework and tools to evaluate vulnerabilities. Research new and developing technologies and standards to help contribute to the continuous improvement of the risk assessment process
• Act as a subject matter expert in understanding why certain risks are a threat to the company and how compensating or mitigating processes affect that risk
• Prepare weekly and monthly reports and dashboards, which shall be submitted to higher management and stakeholder;
• Provide guidance on IT Security Requirements during Contract negotiation discussions.
• Continually reassess the operational risks associated with the function and inherent in the business
• Support Vendor selection and contracting on major sourcing efforts and reassess the risks associated with a vendor relationship prior to the renewal of contract agreements
• Identify and communicate departmental vendor risk issues and compliance problems that have not been adequately addressed; offer reasonable solutions, and assist them with efforts to come into compliance

Knowledge, Skills And Abilities

Education

Experience

Knowledge and skills (general and technical)

About MetLife

Recognized on Fortune magazine's list of the 'World's Most Admired Companies' and Fortune World's 25 Best Workplaces™, MetLife, through its subsidiaries and affiliates, is one of the world's leading financial services companies; providing insurance, annuities, employee benefits and asset management to individual and institutional customers. With operations in more than 40 markets, we hold leading positions in the United States, Latin America, Asia, Europe, and the Middle East.

Our purpose is simple - to help our colleagues, customers, communities, and the world at large create a more confident future. United by purpose and guided by our core values - Win Together, Do the Right Thing, Deliver Impact Over Activity, and Think Ahead - we're inspired to transform the next century in financial services. At MetLife, it's #AllTogetherPossible . Join us!

Skills Required

Risk Mitigation, Security Assessments, Microsoft Office Suite