Senior Digital Auditor

GE Vernova; Remote; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A leading energy company is seeking a Senior Digital Auditor to oversee Third-Party Risk Management. This role involves ensuring compliance with MSP performance indicators and continuous improvement of the TPRM strategy. The ideal candidate should have strong experience in cyber risk management, audit processes, and excellent stakeholder communication skills. The position does not offer relocation assistance and is based in Germany.

Qualifikationen

• Strong understanding of third-party/vendor cyber risk management.
• Experience with cybersecurity frameworks such as ISO 27001 and NIST CSF.
• Strong audit experience with technical/operational security reports.

Aufgaben

• Maintain and operationalize the organization’s TPRM strategy, playbook, and governance framework.
• Monitor compliance with contractual obligations and performance indicators (KPIs/SLAs).
• Act as the liaison between the TPRM organization and the MSP cybersecurity partner.

Kenntnisse

Third-party/vendor cyber risk management

Cybersecurity frameworks: ISO 27001, NIST CSF

Regulatory requirements knowledge

Audit experience

Stakeholder management

Communication skills

Professional certifications

Jobbeschreibung

Job Description Summary

As Senior Digital Auditor, you will play a key role in setting the strategy of Third-Party Risk Management (TPRM) for GE Vernova as well as overseeing and governing services delivered by our external Managed Service Provider (MSP). This role is responsible for ensuring that the MSP meets contractual obligations and performance indicators, as well as tracking, reporting and handling escalations.

This role will ensure that our TPRM strategy, standards, and governance framework remain effective, consistent, and aligned with organizational objectives. The individual will act as the GE Vernova point of contact of TPRM governance, driving oversight, compliance, and continuous improvement.

Job Description

Key Responsibilities

• Governance & Oversight
  • Maintain and operationalize the organization’s TPRM strategy, playbook, standard work, and governance framework.
  • Establish and maintain governance frameworks to oversee MSP TPRM operations.
  • Monitor compliance with contractual obligations and performance indicators (KPIs/SLAs).
  • Conduct regular governance meetings with the external partner and internal stakeholders.
• Risk & Compliance
  • Ensure adherence to organizational policies, regulatory requirements, and industry standards.
  • Monitor risk assessments, control testing, and remediation of findings.
  • Review and assess supplier-proposed contract redlines related to cybersecurity requirements to ensure alignment with organizational standards and risk posture.
• Performance Management
  • Track and report on third-party performance, including but not limited to, incident response, vulnerability management, and risk remediation.
  • Review monthly/quarterly security metrics, dashboards, and reports for accuracy and effectiveness.
  • Escalate risks, gaps, and deviations to senior leadership with actionable recommendations.
• Stakeholder Management
  • Act as the liaison between the TPRM organization and the MSP cybersecurity partner.
  • Partner with DT, Cyber, Legal, Sourcing and Business teams to ensure security alignment with business objectives.
  • Provide clear and timely communication on risks, incidents, and remediation status.
• Continuous Improvement
  • Drive process improvements in governance, risk management, and compliance monitoring.
  • Monitor industry trends, regulations, and emerging risks to keep TPRM strategy up to date.
  • Benchmark MSP services against industry best practices.
  • Recommend enhancements to security policies, standards, and frameworks.

Skills

• Strong understanding of third-party/vendor cyber risk management.
• Experience with cybersecurity frameworks: ISO 27001, NIST CSF, etc.
• Familiarity with regulatory requirements.
• Strong audit experience and ability to review technical/operational security reports.
• Excellent stakeholder management and communication skills.
• Professional certifications preferred: ISO 27001 LA, CISA etc.

Additional Information

Relocation Assistance Provided: No