IT Security & Risk Officer

Quick Facts

• Role: IT Security & Risk Officer

Description

You will conduct end-to-end third-party security risk assessments for suppliers, SaaS, cloud services, and OT solutions, evaluating technical documentation, SOC 2/ISO reports, and security evidence. You’ll advise cross-functional stakeholders on vendor risk during onboarding and throughout the vendor lifecycle, drive supplier remediation discussions, and optimize the TPRM framework as cyber threats and regulations evolve.

Responsibilities

• Perform third-party risk assessments using security evidence, technical documentation, and SOC 2/ISO materials
• Provide vendor risk advisory support for onboarding and lifecycle management in line with internal security policies
• Engage suppliers to clarify security posture, address non-compliance, and agree on actionable risk-remediation plans
• Continuously improve TPRM frameworks, methodologies, and workflows based on emerging threats and regulatory requirements

Requirements

• 5+ years in cybersecurity and/or IT risk management
• 3+ years dedicated to third-party security assessments and vendor risk evaluations
• Practical knowledge of ISO 27001 and familiarity with relevant frameworks and regulations including NIST CSF, SOC 2, CIS Controls, NIS2, DORA, and the EU AI Act
• Strong ability to analyze technical documentation, translate risks into decisions, and communicate effectively in English

Benefits

• Bonus certifications: CISSP, CRISC, CISM, SSCP, or ISO 27001 Lead Auditor/Implementer