Sr Assessor, Global Third Party Risk - Barcelona
Our clients trust us to secure their information, and we ensure integrity, confidentiality, and compliance at every stage of the information lifecycle.Position summaryThe Senior Security Assessor will evaluate the security risks introduced by third-party vendors, assessing their technical, administrative, and physical security controls.
This role requires strong analytical skills, technical expertise, and the ability to collaborate across global teams including Business Units, Procurement, Legal, Privacy and other GSO teams. The ideal candidate will have a deep understanding of infrastructure and application security architecture, encryption mechanisms, strong authentication, business resiliency and other technical security concepts to identify and mitigate risks effectively.Responsibilities:• Conduct in-depth third-party risk assessments, focusing on technical security controls, compliance with ADP standards and industry best practices.• Analyze penetration test reports, security architecture diagrams and vulnerability assessments to evaluate vendor security posture.• Identify, document and report security gaps, collaborating with business leaders and vendors to develop remediation strategies.• Monitor the remediation progress of identified security gaps, ensuring third parties address vulnerabilities in a timely manner.• Guide third-party vendors in understanding security gaps and provide remediation options based on industry best practices.• Communicate complex technical security findings to stakeholders including those with non-technical backgrounds.• Partner with internal teams to drive third-party risk awareness and develop strategies to mitigate risks effectively.• Stay updated on emerging threats, vulnerabilities, and evolving security technologies to enhance the third-party risk assessment process.• Contribute to continuous improvement of the third-party risk management program by recommending and implementing new methodologies and best practices.Qualifications required: • 3-5 years of experience in cybersecurity, with at least 3 years focused on security risk assessments, penetration testing or security auditing.• Strong technical expertise in security controls, network architecture, cloud security and vulnerability management.• Experience interpreting and assessing reports such as penetration tests, SOC 2, ISO 27001 and security risk assessments.• Hands-on experience analyzing security configurations, access controls and encryption implementations.• Proven ability to work independently while collaborating with global teams in a fast-paced environment.• Excellent verbal and written communication skills, with the ability to explain security risks to technical and non-technical audiences.• Fluency in English; additional languages are a plus.Qualifications preferred• Experience with cloud security including AWS, Azure and GCP.• Knowledge of security frameworks such as NIST 800-53, ISO 27001, SOC 2, CSA CCM and CIS Controls.• Familiarity with attack techniques, threat modeling and security architecture principles.• Professional security certifications such as CISSP, CISA, CISM or CCSK are a plus.• Passion for cybersecurity and a proactive approach to learning emerging security threats and technologies.If you’re looking to make an impact in securing ADP’s third-party ecosystem, apply today and become part of our mission to protect critical data and infrastructure.Job DetailsJob Type: Permanent-FT (AC Only)Salaried: Salaried