A fast-growing consultancy firm, specializing in information security, privacy, and risk & resilience, is looking for an experienced Third Party Risk Consultant. You will help organizations gain control over the risks associated with their external partners and suppliers, map their vendor landscape, perform risk analyses, and support them in complying with regulations such as NIS2 and DORA.
You will act as a trusted advisor for identifying, evaluating, and reducing risks in the supply chain and help clients structurally embed their third-party risk management. You will work closely with security, procurement, and risk teams to ensure external partners comply with governance, risk, and compliance.
What you will do.
- Conduct assessments and provide insight into the third-party risk landscape.
- Develop governance and processes for managing information security risks of suppliers.
- Evaluate and classify suppliers based on criticality and risk.
- Perform risk assessments and develop and implement risk scoring methodologies.
- Advise on contract negotiations, incorporating strong security clauses.
- Set up and supervise audit and compliance monitoring.
- Design incident response procedures and coordinate security incidents.
- Develop training and awareness programs for external partners.
- Create reports and dashboards with actionable insights for management.
- Provide strategic advice on supply chain security and supplier risks.
Profile
- Minimum 1 to 3 years of relevant experience in third-party risk management and digital risk, or digital operational resilience.
- Experience with supply chain risk management in general, vendor assessments, and contract negotiations.
- Knowledge of the NIS2 directive and DORA, and the associated requirements.
- Strong communication skills for diverse internal and external stakeholders.
- Analytical ability to perform risk assessments and design risk scoring methodologies.
- Project management and attention to detail (contract clauses, audit trails, compliance checklists).
- Hands-on mentality and willingness to learn and keep knowledge up-to-date.
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.