Senior IT & Cyber Third-Party Risk Lead

Community Consulting; Brussel Hoofdstad; Hybride; EUR 90 000 - 150 000; Plein temps

Résumé du poste

Community Consulting in Belgium is seeking an experienced IT & Cyber Third-Party Risk Assessor to evaluate and monitor risks from intragroup and external suppliers, especially cloud-based services. You will lead risk assessments, challenge contract clauses and coordinate audits to ensure regulatory compliance.

The role requires deep expertise in risk management frameworks and strong collaboration with Procurement, Legal and Business teams.

Qualifications

• Minimum 10 years of experience in Information Security and IT risk management.
• Extensive experience with third-party security risk assessments.
• Proven cloud security experience across SaaS, IaaS and PaaS.
• Experience with application security, vulnerability management and pentesting.
• Familiar with ISO27001, SOC, NIST and OWASP.
• Experience in Financial Services and large corporate environments.
• Experience negotiating IT and cyber third-party contracts.
• Master's degree in a relevant field.
• Fluent French; Dutch is a plus.

Responsabilités

• Conduct comprehensive IT and cyber risk assessments of intragroup and external suppliers during due diligence.
• Evaluate suppliers’ cybersecurity posture, IT controls and regulatory compliance.
• Assess cloud-based solutions with focus on security, data protection and resilience.
• Review vulnerability assessments and penetration testing reports.
• Review and negotiate IT and cybersecurity clauses in supplier contracts.
• Collaborate with Procurement, Legal and Business teams to mitigate risk in contracts.
• Coordinate IT and Cyber onsite audits performed by external auditors.
• Review audit reports, validate findings and monitor remediation plans.
• Escalate critical IT and cyber risks and support timely resolution.
• Develop ICT risk dashboards and management reports.

Connaissances

Information Security

Third-party risk

Cloud security

Vulnerability management

Penetration testing

Risk frameworks

Contractual risk

Cross-functional collaboration

Stakeholder communication

Analytical thinking

Formation

Master's degree in IT / Cybersecurity / Risk Management

Outils

ServiceNow GRC

Description du poste

Community Consulting in Belgium is seeking an experienced IT & Cyber Third-Party Risk Assessor to evaluate and monitor risks from intragroup and external suppliers, especially cloud-based services. You will lead risk assessments, challenge contract clauses and coordinate audits to ensure regulatory compliance.

The role requires deep expertise in risk management frameworks and strong collaboration with Procurement, Legal and Business teams.