Third-Party Security Analyst

About the role

Move first and never stop. Tradeweb Markets LLC (“Tradeweb”) is proud to be an EEO Minorities/Females/Protected Veterans/Disabled/Affirmative Action Employer. Tradeweb’s Cyber Security team plays a critical role in protecting the firm, its clients, and its employees from an evolving third-party threat landscape.

What you'll do

• Lead and perform cybersecurity risk assessments for third-party vendors, suppliers, and service providers
• Review and analyze vendor security artifacts, including SOC 1/SOC 2 reports and ISO 27001 certifications
• Review penetration testing summaries, architecture diagrams, technical documents, and security policies
• Evaluate vendor responses to cybersecurity questionnaires and due diligence requests
• Define vendor risk ratings and document identified risks, gaps, and remediation plans

What you need

• 7–13 yrs of experience
• Incident response
• Network security
• ISO 27001
• Risk management
• Penetration testing
• Due diligence
• Any graduate

Good to have

• CISA
• CISSP