Senior Risk & Compliance Analyst (Location Flexible)
Role Description
Protecting Dropbox and our users is essential to being worthy of trust. We’re looking for a Risk Governance Senior Analyst to join our Governance Risk & Compliance team. In this role, you’ll run the third party risk assessments, as well as help improve the program. The new hire will be responsible for assessing third parties (vendors, professional services, managed services, etc.) risks, coordinating cross-functionally for risk mitigation, and developing key risk metrics. Additionally, you will work in depth with other parts of the business to ensure Dropbox meets our security, privacy, and compliance commitments.
You'll work closely with counterparts in, IT&S, Security, Privacy, and Legal team to help us manage and maintain the third party risk management program. You will also work closely with the business stakeholders and procurement partners to ensure a smooth vendor purchasing and on-boarding experience.
Responsibilities
- You'll engage with teams across Dropbox to understand the security, privacy, compliance, and BCP risks associated with third parties.
- You will update and maintain processes for third parties to be assessed against our security and privacy controls.
- You will work with ITS, procurement and commercial legal to support the end-to-end third party purchasing process.
- You will work with ServiceNow technical team to identify and fix issues and bugs of the tool.
- You will put together quarterly reports and dashboards of the TPRM program
Requirements
- 4+ years of experience in a privacy, security, risk management, compliance, or IT.
- Thorough and working knowledge of global security, privacy, and/or risk management regulations, standards, and frameworks.
- Possesses a high degree of comfort interacting with diffferent types of business requestors
- Understanding and willingness to learn about diverse business functions.
- Real passion for technology and desire to tackle complex problems with creative solutions.
- Great interpersonal skills and ability to work well in a fast-paced team environment.
