Vendor Due Diligence Specialist

A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity while delivering real business impact for our multi-billion-dollar global business. WHAT YOU'LL DO • Serve as a technical subject matter expert within our firm’s third-party information security risk management program • Perform in-depth security assessments of new and existing third parties that access, process, store, or transmit firm information • Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models • Analyze business use cases, data flows, system integrations, and technical architectures to establish appropriate risk context • Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and architecture documentation • Assess controls across identity, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response, and application security • Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediation plans • Produce concise, risk-based assessment reports that explain issue materiality, actual risk, and recommended next steps • Partner with Technology, Compliance, Legal, Procurement, and other stakeholders to support a consistent third-party risk management process • Improve assessment methodologies, processes, templates, and metrics while staying current on emerging threats and security practices WHAT'S REQUIRED • Five or more years of experience in information security, technology risk, security engineering, security architecture, or third-party risk management • Experience performing technical security assessments of third-party environments, including evaluating control design, effectiveness, and risk impact • Bachelor's degree in information security, information systems, information technology, or a related field • Strong technical understanding of cloud and software-as-a-service environments, identity and access management, network security, vulnerability management, and data protection • Understanding of logging and monitoring, incident response, application security, and technical control evaluation across complex environments • Familiarity with industry-recognized security frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001, and SOC 2 • Ability to analyze technical evidence, challenge third-party assertions, and reach independent conclusions about control effectiveness and security risk • Strong analytical judgment and communication skills, with the ability to explain technical security issues to technical and nontechnical stakeholders • Ability to work independently, manage multiple assessments, and collaborate effectively across teams • Commitment to the highest ethical standards WE TAKE CARE OF OUR PEOPLE We invest in our people, their careers, their health, and their well-being. When you work here, we provide: • Sports card • Private life insurance • Private medical and dental care, with vision allowance • Private pension scheme • Volunteer opportunities • Support for employee-led affinity groups representing women, people of color and the LGBT+ community • Business travel accident insurance • Employee assistance program • Educational assistance reimbursement ABOUT POINT72 Point72 is a leading global alternative investment firm led by Steven A. Cohen with over $58.5 billion in assets under management (as of July 1, 2026). Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain industry’s brightest talent by cultivating an investor-led culture and committing to our people’s long-term growth. For more information, visit www.Point72.com. Our Warsaw office gives us access to world-class talent with a reputation for excellence and innovation. We're looking to build an office of subject-matter experts whose fresh perspectives will help evolve our infrastructure and advance the capabilities of our teams. Learn more at https://point72.com/Warsaw.