Senior Third-Party Security Risk Management Specialist

We are looking for a cybersecurity professional with strong experience in third-party risk management, security assessments and governance activities. The successful candidate should be comfortable assessing a broad range of technologies and services, working with international suppliers and navigating complex enterprise environments.

Required Experience

• Minimum 5 years of professional experience in cybersecurity, information security, IT risk management or related areas.

• Minimum 3 years of hands-on experience performing third-party security assessments, supplier security reviews, technology risk assessments or similar activities.

• Demonstrated experience analyzing technical and security documentation and translating findings into actionable risk decisions.

• Experience working in large enterprise environments with multiple stakeholders and governance processes.

• Experience in collaborating with external suppliers and managing security-related discussions and follow-up activities.

Knowledge & Skills

• Strong understanding of cybersecurity principles and risk management practices.

• Practical knowledge of Third-Party Risk Management (TPRM), supply chain security and vendor risk assessment methodologies.

• Experience assessing security controls against recognized frameworks and standards, including:

o ISO 27001

o NIST Cybersecurity Framework

o SOC 2

o NIS2

o DORA

o CIS Controls

• Understanding of AI governance, AI-related risks and regulatory requirements such as the EU AI Act.