IT & Cyber Third Party Risk Assessor

A leading organization in the banking sector is recruiting an IT & Cyber Third Party Risk Assessor for their Governance, Risk & Compliance (GRC) team. In this strategic role, you will safeguard the organization's operations by assessing and managing IT and cyber risks related to external vendors and intragroup providers, with a strong focus on cloud services and key technology partners.

What you will do.

• Conduct due diligence, evaluate controls, and ensure suppliers meet security and regulatory expectations.
• Assess cloud solutions and providers (SaaS, IaaS, PaaS), reviewing architectures and risk mitigations.
• Analyze vulnerability management and penetration testing reports, challenge remediation plans, and track closure of critical findings.
• Identify and assess application-related risks and ensure appropriate security measures.
• Apply recognized standards (ISO 27001, SOC 2, NIST, OWASP) to structure assessments and recommendations.
• Review and negotiate contractual IT & Cyber clauses with Procurement and Legal to embed robust protections.
• Coordinate supplier audits, use GRC tools (e.g., ServiceNow), and support continuous monitoring.
• Collaborate with cyber defense, security architects, continuity experts, DPOs, and business teams.