Third Party Risk Management Consultant
New
E
emagineCybersecurity risk
Spain and fully remote in Europe possibleContractMiddle
Salary300 - 400 EUR per day
Apply NowOpens the employer's application page
Job Details
- Languages
- Fully fluent in written and spoken English
- Required Skills
- CybersecurityStakeholder managementRisk Management
Requirements
- Bring a senior risk management background with an internal audit-style approach.
- Have solid cybersecurity and information security knowledge.
- Have an ISO 27001-type certification, ideally.
- Have experience reviewing supplier questionnaires and evidence.
- Have experience documenting risks and gaps.
- Have experience following up on remediation plans and exceptions.
- Have working knowledge of NIS 2 and supply-chain cybersecurity expectations.
- Be fully fluent in written and spoken English.
- Familiarity with NIST CSF, SOC 2, and TPRM or GRC tooling is a nice to have.
Responsibilities
- Finalise and roll out the third-party risk management process.
- Run the third-party risk management process day to day.
- Send questionnaires to suppliers and review their answers and evidence.
- Document risks and gaps, and follow up on remediation plans and exceptions.
- Respond to cybersecurity questionnaires received from customers.
- Work with stakeholders across the business, including procurement.
View Full Description & ApplyYou'll be redirected to the employer's site
