Senior Third-Party Risk & Cloud Security Expert

Stott and May Inc.; Brussel Hoofdstad; Hybride; EUR 90 000 - 130 000; Plein temps

Résumé du poste

A major financial services organisation in Belgium is seeking a Senior IT & Cyber Third-Party Risk Expert to join its Governance, Risk and Compliance team. The role is hybrid, with 50% on-site and 50% remote, focusing on evaluating and mitigating IT and cyber risks of third-party services, including cloud solutions.

You will work with cyber defence, security architecture, business continuity, data protection and procurement to ensure risk is assessed, mitigated and monitored across the supplier

Qualifications

• 10+ years in information security and IT & cyber risk management.
• Extensive experience with third-party risk assessments and cloud security.
• Knowledge of ISO 27001, SOC 2, NIST, OWASP.
• Financial services experience in a large corporate environment.
• Ability to review and negotiate IT and cyber clauses in supplier contracts.
• Strong process design and business analysis skills.
• Experience delivering risk topic presentations and training.

Responsabilités

• Conduct third-party IT and cyber risk assessments during due diligence.
• Assess cloud solutions with focus on security, data protection and resilience.
• Review vulnerability and penetration testing reports against security best practice and regulatory requirements.
• Review and negotiate IT and cyber clauses in supplier contracts.
• Coordinate onsite audits and track remediation.
• Monitor supplier security posture and governance via reports.
• Lead ICT risk and cyber committees with business representatives and supplier security teams.
• Build and maintain ICT risk dashboards and summary reports for senior management.
• Collaborate with cyber defence, security architects, data protection officers, procurement and legal.

Connaissances

Info security

Third-party risk

Cloud security

Regulatory compliance

Audit methodologies

Financial services experience

Contract clauses

Business analysis

Presentations

Training delivery

Formation

Master's degree in IT/cybersecurity or risk management

Outils

ServiceNow

Description du poste

A major financial services organisation in Belgium is seeking a Senior IT & Cyber Third-Party Risk Expert to join its Governance, Risk and Compliance team. The role is hybrid, with 50% on-site and 50% remote, focusing on evaluating and mitigating IT and cyber risks of third-party services, including cloud solutions.

You will work with cyber defence, security architecture, business continuity, data protection and procurement to ensure risk is assessed, mitigated and monitored across the supplier