iCapital is powering the world’s alternative investment marketplace. Our financial technology platform has transformed how advisors, wealth management firms, asset managers, and banks evaluate and recommend bespoke public and private market strategies for their high-net-worth clients. iCapital services approximately $113 billion in global client assets invested in 942 funds, as of January 2022.
iCapital was named Solutions Provider of the Year at the 2020 MMI/Barron’s Industry Awards and selected to the 2018, 2019, 2020 and 2021 Forbes FinTech 50, a list of the top 50 innovative financial technology companies that are transforming finance through technology
The Vendor Risk Specialist at iCapital Network works on a small team to evaluate the risk of third-party vendors. Vendor risk includes information security, financial, business continuity, and regulatory risk. The vendor risk process includes engaging internal vendor relationship owners and vendor contacts to obtain various artifacts and question/answers for review. The review will identify any outstanding risks which are presented to management for risk acceptance.
Responsibilities
- Performs third-party vendor security assessment activities including evaluation of vendor controls, practices, process enhancements, and independent audit service reports
- Communicates directly with third party vendors to obtain artifacts and answers to iCapital diligence questions (DDQs)
- Recommends mitigating/compensating controls for vendor security programs
- Communicates and tracks remediation plans with third-party vendors, business and technology partners
- Escalates outstanding risk items to management
- Maintains and presents metrics on the vendor risk program to management
- From time to time assist the assurance team with client DDQs as vendor risk and client assurance are related programs
Candidate Profile
- Five years experience in a technology role with two to three years in a vendor risk role
- A bachelor's degree in computer science or technology/information security-related field
- Experience with Coupa or other vendor GRC tools a plus
- Experience with RiskRecon or other security risk measurements tools a plus
- Understanding of ISO-27001 or NIST 800 based security program standards
- Knowledge of relevant legal requirements, regulatory requirements, and privacy laws
- Knowledge of security risks pertaining to cloud (IaaS, SaaS, AaaS)
- A quick learner with desire to continually learn
- Excellent communication skills including strong English writing skills
- The successful candidate will be detail oriented to ensure that all requirements are met and documented.
Benefits
iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO).
For additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-in
