Senior Third-Party IT & Cyber Risk Expert

BNP Paribas Fortis; Brussel; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Meal vouchers

Insurance

Holidays

Phone use

IT equipment

Transport

Job summary

BNP Paribas Fortis is seeking a Third-Party Technology Risk Management Expert to assess IT and cybersecurity risks related to intragroup and external suppliers from its Brussels hub. You will collaborate with internal and external stakeholders to ensure robust risk management in a dynamic environment.

The role emphasizes risk assessments, contract clauses, audits, remediation, and ongoing improvements to TPTRM methodologies within a CoE Security - Governance, Risk & Compliance team.

Qualifications

• Cybersecurity, risk management and compliance expertise including threat knowledge and guidance.
• 10+ years in IT & Cyber Risk Management with focus on third-party security assessments.
• Experience reviewing and amending IT security clauses in contracts.
• Some experience in process design and business analysis for risk management.
• Financial services background in large corporate environments.
• Strong analytical and synthesis skills to present clear insights to management.
• Excellent written and verbal English; French or Dutch fluency is a plus.

Responsibilities

• Conduct IT and cyber risk assessments of third-party suppliers and cloud solutions.
• Review and embed IT security clauses in supplier contracts with Procurement, Legal and Business teams.
• Coordinate onsite audits and drive remediation with third parties.
• Track security posture via reviews and dashboards for senior management.
• Enhance TPTRM methodologies, tools and templates to reflect evolving threats.

Skills

Cybersecurity expertise

Risk management

Regulatory compliance

Contractual IT security review

Analytical thinking

Communication & stakeholder management

Autonomy & proactivity

Job description

BNP Paribas Fortis is seeking a Third-Party Technology Risk Management Expert to assess IT and cybersecurity risks related to intragroup and external suppliers from its Brussels hub. You will collaborate with internal and external stakeholders to ensure robust risk management in a dynamic environment.

The role emphasizes risk assessments, contract clauses, audits, remediation, and ongoing improvements to TPTRM methodologies within a CoE Security - Governance, Risk & Compliance team.