Manager ICT Third Party Risk

MAM Gruppe; Frankfurt; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Zusammenfassung

MAM Gruppe in Frankfurt is seeking a Manager ICT & Information Security Third Party Risk for its 2nd Line of Defence. You will independently assess and challenge the security and technology risks posed by external providers, aligning with regulatory requirements.

The role collaborates with Information Security, IT, Procurement and Risk committees to ensure third parties meet DORA, NIS2, ISO 27001 and MaRisk standards, and to prepare risk reporting for senior management.

Qualifikationen

• Several years of experience in Information Security, ICT, Third Party or Cyber Risk.
• 2nd Line of Defence experience is highly desirable; banking/financial services experience advantageous.
• Knowledge of TPRM processes and third-party security assessments.
• Familiarity with ISO 27001, DORA, NIS2 and EBA requirements.

Aufgaben

• Independently review and challenge Information Security and ICT risk assessments for third-party providers.
• Assess the security posture of critical suppliers, vendors, cloud providers and outsourcing partners.
• Challenge the 1st Line on identified risks, controls, remediation and risk acceptance.
• Evaluate third-party controls across IAM, data protection, vulnerability management, incident response, cloud security and cyber resilience.
• Support the TPRM and Information Security Risk frameworks.
• Monitor third-party incidents, vulnerabilities, control weaknesses and remediation.
• Ensure alignment with DORA, NIS2, ISO 27001, EBA Guidelines and MaRisk.
• Prepare risk reporting for senior management and risk committees.
• Support internal audits and regulatory assessments.

Kenntnisse

Information Security

ICT

Third Party Risk

Cyber Risk

Risk Management

Stakeholder Communication

Jobbeschreibung

Manager ICT & Information Security Third Party Risk – 2nd Line of Defence | Frankfurt

Our client, a banking organisation in Frankfurt, is seeking a Manager ICT & Information Security Third Party Risk for its 2nd Line of Defence. The role covers independently assessing and challenging the security and technology risks posed by external providers, working closely with Information Security, IT, Procurement, Operational Risk and senior stakeholders to ensure third parties meet the organisation's security, risk and regulatory requirements.

The role:

• Independently review and challenge Information Security and ICT risk assessments for third-party providers.
• Assess the security posture of critical suppliers, vendors, cloud providers and outsourcing partners.
• Challenge the 1st Line on identified risks, controls, remediation and risk acceptance.
• Evaluate third-party controls across IAM, data protection, vulnerability management, incident response, cloud security and cyber resilience.
• Support the TPRM and Information Security Risk frameworks.
• Monitor third-party incidents, vulnerabilities, control weaknesses and remediation.
• Ensure alignment with DORA, NIS2, ISO 27001, EBA Guidelines and MaRisk.
• Prepare risk reporting for senior management and risk committees.
• Support internal audits and regulatory assessments.

What you'll need:

• Several years' experience in Information Security, ICT, Third Party or Cyber Risk.
• 2nd Line of Defence experience highly desirable; banking/financial services experience advantageous.
• Knowledge of TPRM processes and third-party security assessments.
• Familiarity with ISO 27001, DORA, NIS2 and EBA requirements.
• Knowledge of cloud security, IAM, vulnerability and incident management, and cyber resilience.
• Ability to independently challenge the 1st Line and communicate risk to senior stakeholders.
• Fluent German and English.