Senior Third-Party Risk & Cybersecurity Manager

Koda Staff; Brussel; Sur place; EUR 70 000 - 100 000; Plein temps

Résumé du poste

Koda Staff is assisting a client in Belgium to hire a Third Party Risk Manager to oversee cybersecurity risks posed by external providers and to integrate and enforce cybersecurity requirements across processes in line with the CISO strategy and regulatory expectations.

You will establish and continuously improve the TPRM framework, define risk mitigation actions, ensure regulatory compliance such as GDPR and DORA, and lead incident reviews affecting third parties, working with stakeholders

Qualifications

• 5+ years of experience in third-party risk management, cybersecurity, or compliance.
• Deep understanding of regulatory compliance and security governance.
• Excellent communication, negotiation, and stakeholder management skills.
• Strong knowledge and experience with TPRM processes and procedures.

Responsabilités

• Establish, maintain, and continuously improve the cybersecurity third party risk management framework, in alignment with applicable regulatory and industry standards.
• Define, monitor, and document risk mitigation measures, acceptance conditions, and related action plans.
• Maintain and communicate TPRM processes and procedures to ensure compliance with all relevant regulations (e.g. SRB, EBA, GDPR, DORA).
• Lead the review, monitoring and reporting of incidents impacting third parties.

Connaissances

Third-party risk management

Cybersecurity

Regulatory compliance

Stakeholder management

Communication

Description du poste

Koda Staff is assisting a client in Belgium to hire a Third Party Risk Manager to oversee cybersecurity risks posed by external providers and to integrate and enforce cybersecurity requirements across processes in line with the CISO strategy and regulatory expectations.

You will establish and continuously improve the TPRM framework, define risk mitigation actions, ensure regulatory compliance such as GDPR and DORA, and lead incident reviews affecting third parties, working with stakeholders