Technology Third Party Risk Specialist, Sr

The Technology Third Party Risk Specialist, Sr for Technology Third Party Risk Management(TPRM) will work within the broader third-party risk process to analyze technology risk present in both potential and existing Huntington third-party relationships.  Specific responsibilities include, but are not limited to:

Duties and Responsibilities:

• Perform and/or support execution of Technology Third Party Risk Management (TPRM) assessments on third-party control environments and be able to articulate both the inherent and residual risk of a relationship.
• Strong communication skills to articulate security control requirements to both third parties and internal segment business partners.
• Assist in the continued development, maintenance and enhancement of the Technology Third Party Risk Management programs and related initiatives. 
• Identify, assess and communicate third party gaps and observations with stakeholders.
• Ensure timely completion of assigned Technology TPRM assessments with a sense of urgency in accordance with guidelines.
• Be proactive and follow-up with stakeholders regarding open action plans and other Tech TPRM items.
• Help foster a risk awareness culture in the business segment.
• Build and maintain strong relationships with key stakeholders of Third-Party Risk Management (TPRM) processes including the Enterprise TPRM team, Technology Risk Segment Officer (SRO), IT Segment Risk Managers, 2L Technology Risk team, Sourcing team, and third line oversight groups, and the business segments.
• Maintain flexibility to successfully adjust to dynamic priorities.
• Perform other tasks as assigned.

Basic Qualifications:

• 3 Years of experience in a Technology Third Party Risk, IT Audit, or IT Risk position
• Bachelor's degree

Preferred Qualifications:

• Knowledge of IT/cybersecurity risk management including processes and controls. 
• Knowledge of third-party risk management principals.
• Knowledge of common industry reporting and certifications (SOC 1 and 2, PCI)
• Familiarity with common security control frameworks, i.e. NIST
• Strong organizational, analytical, critical thinking and problem-solving skills.
• Excellent written and verbal communication skills with the ability to communicate and present requirements and issues clearly and concisely.
• Strong interpersonal skills and ability to work collaboratively with all businesses
• Ability to multi-task and work in a fast-paced environment
• Proficient in MS Office skills
• CISA, CRISC, CISM, and/or CISSP certifications preferred
• Possible Travel 0-10% 

#Hybrid

#LI-SG1

Exempt Status: (Yes = not eligible for overtime pay) (No = eligible for overtime pay)

Workplace Type:

Our Approach to Office Workplace Type

Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds:  in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Huntington is an equal opportunity and affirmative action employer and is committed to providing equal employment opportunities for all regardless of race, color, religion, sex, national origin, age, disability, sexual orientation, veteran status, gender identity and expression, genetic information, or any other basis protected by local, state, or federal law.

Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details.

Agency Statement: Huntington does not accept solicitation from Third Party Recruiters for any position

Huntington will not sponsor applicants for this position for immigration benefits, including but not limited to assisting with obtaining work permission for F-1 students, H-1B professionals, O-1 workers, TN workers, E-3 workers, among other immigration statuses. Applicants must be currently authorized to work in the United States on a full-time basi