Vendor Due Diligence Specialist

Point72
Warsaw, Poland
On-site

Who this role is best for

A natural match if you have experience in third-party security assessments and a background in information security frameworks.

Best fit for

  • Candidates with experience in evaluating third-party security controls and a background in cloud and SaaS environments
    — “Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models”
  • Individuals who can analyze technical architectures and explain security risks to both technical and non-technical stakeholders
    — “Strong analytical judgment and communication skills, with the ability to explain technical security issues to technical and nontechnical stakeholders”
  • Professionals with a track record of improving assessment methodologies and staying updated on emerging security threats
    — “Improve assessment methodologies, processes, templates, and metrics while staying current on emerging threats and security practices”

Things to consider

  • The role demands independent work and the ability to manage multiple assessments simultaneously
    — “Ability to work independently, manage multiple assessments, and collaborate effectively across teams”
  • A commitment to high ethical standards is a non-negotiable requirement
    — “Commitment to the highest ethical standards”

How to stand out

  • Highlight your experience in validating third-party responses and identifying control gaps
    — “Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediation plans”
  • Emphasize your ability to produce concise, risk-based reports with actionable steps
    — “Produce concise, risk-based assessment reports that explain issue materiality, actual risk, and recommended next steps”
  • Demonstrate your familiarity with NIST CSF, ISO 27001, and SOC 2 frameworks in your application materials
    — “Familiarity with industry-recognized security frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001, and SOC 2”
Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • serve as a technical subject matter expert
  • perform in-depth security assessments
  • evaluate third-party security controls
  • analyze business use cases
  • produce concise, risk-based assessment reports
Typical background
5+ years of experience in information securitybachelor's degree in information security or related field

Skills & requirements

Required

Information Security Risk ManagementTechnical Security AssessmentsAnalyzing Business Use CasesReviewing Security EvidenceAssessing ControlsProducing Risk-based Assessment Reports

Preferred

Familiarity With Emerging Threats And Security Practices

Stack & domain

Information SecurityTechnology RiskSecurity EngineeringSecurity ArchitectureThird-party Risk ManagementTechnical Security AssessmentsCloud And Software-as-a-service EnvironmentsIdentity And Access ManagementNetwork SecurityVulnerability ManagementData ProtectionLogging And MonitoringIncident ResponseApplication SecurityTechnical Control Evaluation

About the role

Original posting from Point72 via Greenhouse

A Career with Point72's Technology Team

As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.

As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity while delivering real business impact for our multi-billion-dollar global business.

WHAT YOU'LL DO

Serve as a technical subject matter expert within our firm’s third-party information security risk management program

Perform in-depth security assessments of new and existing third parties that access, process, store, or transmit firm information

Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models

Analyze business use cases, data flows, system integrations, and technical architectures to establish appropriate risk context

Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and architecture documentation

Assess controls across identity, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response, and application security

Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediation plans

Produce concise, risk-based assessment reports that explain issue materiality, actual risk, and recommended next steps

Partner with Technology, Compliance, Legal, Procurement, and other stakeholders to support a consistent third-party risk management process

Improve assessment methodologies, processes, templates, and metrics while staying current on emerging threats and security practices

WHAT'S REQUIRED

Five or more years of experience in information security, technology risk, security engineering, security architecture, or third-party risk management

Experience performing technical security assessments of third-party environments, including evaluating control design, effectiveness, and risk impact

Bachelor's degree in information security, information systems, information technology, or a related field

Strong technical understanding of cloud and software-as-a-service environments, identity and access management, network security, vulnerability management, and data protection

Understanding of logging and monitoring, incident response, application security, and technical control evaluation across complex environments

Familiarity with industry-recognized security frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001, and SOC 2

Ability to analyze technical evidence, challenge third-party assertions, and reach independent conclusions about control effectiveness and security risk

Strong analytical judgment and communication skills, with the ability to explain technical security issues to technical and nontechnical stakeholders

Ability to work independently, manage multiple assessments, and collaborate effectively across teams

Commitment to the highest ethical standards

WE TAKE CARE OF OUR PEOPLE

We invest in our people, their careers, their health, and their well-being. When you work here, we provide:

Sports card

Private life insurance

Private medical and dental care, with vision allowance

Private pension scheme

Volunteer opportunities

Support for employee-led affinity groups representing women, people of color and the LGBT+ community

Business travel accident insurance

Employee assistance program

Educational assistance reimbursement

ABOUT POINT72

Point72 is a leading global alternative investment firm led by Steven A. Cohen with over $58.5 billion in assets under management (as of July 1, 2026). Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain industry’s brightest talent by cultivating an investor-led culture and committing to our people’s long-term growth. For more information, visit www.Point72.com.

Our Warsaw office gives us access to world-class talent with a reputation for excellence and innovation. We're looking to build an office of subject-matter experts whose fresh perspectives will help evolve our infrastructure and advance the capabilities of our teams. Learn more at https://point72.com/Warsaw.

Source: Point72 careers (Greenhouse)

Similar roles