Strategic Third-Party IT Risk & Cybersecurity Expert

Editx; Brussel; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Editx is seeking a Third-Party Technology Risk Management (TPTRM) Expert to join our Brussels-based CoE Security - Governance, Risk & Compliance team. You will assess IT and cybersecurity risks related to intragroup and external suppliers, and collaborate with stakeholders to strengthen risk management in a dynamic environment.

You will conduct risk assessments, review security clauses in contracts, coordinate audits and drive remediation plans.

Qualifications

• Experience conducting third-party IT/cyber risk assessments.
• Ability to review and negotiate security clauses in supplier contracts.
• Proven track record coordinating audits and remediation with third parties.

Responsabilités

• Conduct IT and cyber risk assessments of third-party suppliers and cloud solutions.
• Review and embed security clauses in supplier contracts with Procurement and Legal.
• Coordinate onsite audits, validate findings, and drive remediation with third parties.
• Track security posture via reviews and synthesize risks for senior management dashboards.
• Enhance TPTRM methodologies, tools and templates to reflect threats and regulatory changes.

Connaissances

IT risk assessment

Cybersecurity risk assessment

Contract negotiation

Stakeholder management

Dashboard reporting

Description du poste

Editx is seeking a Third-Party Technology Risk Management (TPTRM) Expert to join our Brussels-based CoE Security - Governance, Risk & Compliance team. You will assess IT and cybersecurity risks related to intragroup and external suppliers, and collaborate with stakeholders to strengthen risk management in a dynamic environment.

You will conduct risk assessments, review security clauses in contracts, coordinate audits and drive remediation plans.