IT & Cyber Third Party Risk Management Expert - HQ Brussels

Editx; Brussel; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Editx is seeking a Third-Party Technology Risk Management (TPTRM) Expert to join our Brussels-based CoE Security - Governance, Risk & Compliance team. You will assess IT and cybersecurity risks related to intragroup and external suppliers, and collaborate with stakeholders to strengthen risk management in a dynamic environment.

You will conduct risk assessments, review security clauses in contracts, coordinate audits and drive remediation plans.

Qualifications

• Experience conducting third-party IT/cyber risk assessments.
• Ability to review and negotiate security clauses in supplier contracts.
• Proven track record coordinating audits and remediation with third parties.

Responsabilités

• Conduct IT and cyber risk assessments of third-party suppliers and cloud solutions.
• Review and embed security clauses in supplier contracts with Procurement and Legal.
• Coordinate onsite audits, validate findings, and drive remediation with third parties.
• Track security posture via reviews and synthesize risks for senior management dashboards.
• Enhance TPTRM methodologies, tools and templates to reflect threats and regulatory changes.

Connaissances

IT risk assessment

Cybersecurity risk assessment

Contract negotiation

Stakeholder management

Dashboard reporting

Description du poste

Overview

As a Third-Party Technology Risk Management (TPTRM) Expert in our CoE Security - Governance, Risk & Compliance team, you will assess, evaluate and monitor IT and cybersecurity risks related to intragroup and external suppliers. Join our Brussels-based team of 10 specialists, where you will collaborate closely with internal and external stakeholders to ensure robust risk management in a dynamic environment.

Responsibilities

• Conduct comprehensive IT and cyber risk assessments of third-party suppliers (intragroup and external) and cloud-based solutions to evaluate their cybersecurity posture, IT controls, and compliance with regulatory requirements.
• Review, challenge, negotiate, and embed IT and cybersecurity clauses in supplier contracts, collaborating with Procurement, Legal, and Business teams.
• Coordinate onsite audits, validate findings, and drive remediation plans with third parties, escalating critical risks to stakeholders.
• Track third-party security posture through periodic reviews (vulnerability reports, incident responses, compliance attestations) and synthesize risks for senior management via dashboards.
• Enhance TPTRM methodologies, tools, and templates (e.g., risk assessment questionnaires, audit guidelines) to reflect emerging threats and regulatory changes.