Senior Third-Party IT Risk & Cyber Expert

BNP Paribas Fortis; Brussel Hoofdstad; Sur place; EUR 120 000 - 150 000; Plein temps

Résumé du poste

BNP Paribas Fortis in Brussels hosts a Third-Party Technology Risk Management Expert within the CoE Security - Governance, Risk & Compliance. You will assess IT and cyber risks from intragroup and external suppliers and collaborate with stakeholders to maintain robust risk management in a dynamic setting.

You will review and embed security clauses in contracts, coordinate audits, and track risk posture using dashboards.

Qualifications

• Over 10 years of experience in IT and Cyber Risk Management with a focus on third-party technical security risk assessments, supplier/vendor evaluations, audits and cloud security.
• Proven ability to review and amend IT security and cybersecurity clauses in contracts.
• Experience in the Financial services sector and large corporate environments.
• Strong analytical/synthesis skills to distill complex risks into actionable insights for management.
• Excellent written and verbal English; fluent in French (mandatory) or Dutch.

Responsabilités

• Assess, evaluate and monitor IT and cybersecurity risks relating to intragroup and external suppliers.
• Review, negotiate and embed IT and cybersecurity clauses in supplier contracts with Procurement, Legal and Business teams.
• Coordinate onsite audits, validate findings and drive remediation plans with third parties.
• Track third-party security posture via reviews, vulnerability reports, incident responses and attestations; synthesize risks for senior management.
• Contribute to TPTRM methodologies, tools and templates to reflect emerging threats and regulatory changes.

Connaissances

Cybersecurity

Risk management

Compliance

ISO 27001

SOC

NIST

OWASP

Cloud security

Third-party risk

Contract review

Audit methodologies

Stakeholder management

Financial services

Vendor evaluations

Description du poste

BNP Paribas Fortis in Brussels hosts a Third-Party Technology Risk Management Expert within the CoE Security - Governance, Risk & Compliance. You will assess IT and cyber risks from intragroup and external suppliers and collaborate with stakeholders to maintain robust risk management in a dynamic setting.

You will review and embed security clauses in contracts, coordinate audits, and track risk posture using dashboards.