**ABOUT THE ROLE**
- Execute the full lifecycle of information security and data privacy third-party risk assessments as needed, either individually or through available resources, within the region
- Assist and execute control assessment activties to identify control effectiveness, maturity and areas for improvements within region
- Collaborate with internal third-party relationship owners and third-party representatives to recommend necessary security and privacy controls to effectively mitigate risks to Takeda
- Assist in promoting third-party risk management processes across business lines to help influence a strong culture of proactive awareness for third-party security risks
- Improve and help foster a positive end user experience with business stakeholders by enhancing our program to accomodate an agile business enviroment
**ACCOUNTABILITIES**
- Execute the full lifecycle of information security and data privacy third-party risk assessments as needed, either individually or through available resources
- Assists and mentors other risk analyst team members levering their industry risk background and experience
- Collaborate with internal third-party relationship owners or third-party representatives in their efforts to provide responses to the security and privacy risk assessment questionnaire
- Assist and execute regional control assessment activties to identify control effectiveness, maturity and areas for improvements




- Effectively translate third-party responses to assessment questionnaire, using sound judgement, into concise risk exposure reporting for delivery to internal stakeholders
- Partner with internal third-party relationship owners and third-party representatives to recommend necessary security and privacy controls to effectively mitigate risks to Takeda
- Ensure robust tracking and remediation of third-party security and privacy risk exposures identified through assessment processes
- Provide any necessary training and awareness related to the third-party security process
- Contribute to the gathering and distribution of periodic program metrics and/or dashboards
**QUALIFICATIONS**
- Bachelor's degree or equivalent
- 3-4 years of proven experience in information security and/or third-party risk management
- Ability to manage multiple workstreams simultaneously
- Ability to think critically and analytically
- Capable of effectively managing shifting priorities
- Strong communication, interpersonal, presentation, and organizational skills
- Comfortable operating in and navigating a integral organization where risk stakeholders can be located across geographies and time zones
Desired
- Ability to work towards obtaining industry secruity certification(s) (CISSP)
- ServiceNow GRC experience
**Locations**: MEX - Santa Fe
**Worker Type**: Employee
**Worker Sub-Type**: Regular
**Time Type**: Full time

📌 Risk & Control Assurance Analyst (Xico)
🏢 Takeda Pharmaceutical
📍 Xico