Third Party Risk Management Expert

Há 1 dia

Lisboa, Portugal Tempo integral

Inetum is a
European leader in digital services
, supporting organizations as they navigate continuous technological change. The company helps clients accelerate their digital transformation through a broad portfolio that includes
consulting, application services, digital engineering, cloud, cybersecurity, platforms, and infrastructure services
Job Description
We are looking for a
Third-Party Cyber Risk Management Specialist
to help implement and operate our internal TPRM framework.
Responsibilities
Support the implementation and continuous improvement of the TPRM operating model.
Perform cybersecurity risk assessments of new and existing suppliers.
Review security questionnaires and evidence, including ISO/IEC * certificates, SOC 2 reports, penetration test summaries, and security policies.
Identify control gaps and define remediation actions, compensating controls, and risk escalation requirements.
Manage supplier assessments from onboarding and inherent risk screening through remediation, reassessment, and offboarding.
Coordinate cybersecurity questionnaire responses for customers and partners.
Maintain auditable records and support risk reporting through KPIs and KRIs.
Work closely with GRC, Cybersecurity, Procurement, Legal, Business Owners, and suppliers.
Identify opportunities to automate and streamline the TPRM lifecycle.
Support knowledge transfer to the internal GRC team.
Profile
Experience in TPRM, cybersecurity risk, IT audit, security assurance, or GRC.
Knowledge of supplier risk assessments, security controls, ISO/IEC *, and SOC 2.
Strong analytical, communication, stakeholder management, and reporting skills.
#J-*-Ljbffr