Senior Vendor Development Manager, Cybersecurity

Jobtailor; Hohenbrunn; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Zusammenfassung

Jobtailor is seeking an experienced Vendor Manager in cybersecurity to build and manage a strategic ecosystem of security partners. You will evaluate providers, conduct risk assessments, and drive security requirements across suppliers.

You will develop KPIs, SLAs, and scorecards, support contract negotiations, and collaborate with IT Security, Procurement, Legal and Compliance. Experience with GDPR, NIS2, DORA, and ISO 27001 is highly valued.

Qualifikationen

• University degree in Computer Science, IT Security, or related field.
• Several years of experience in vendor management or third-party risk management, preferably in cybersecurity.
• In-depth knowledge of ISO 27001, NIST, CIS Controls and regulatory expectations.

Aufgaben

• Build and develop a strategic vendor ecosystem in cybersecurity.
• Evaluate and select security service providers and technology partners.
• Conduct third-party risk assessments and security evaluations.
• Manage and monitor security requirements for suppliers.
• Develop KPIs, SLAs, and vendor scorecards.
• Support contract negotiations focusing on security and compliance.
• Collaborate with IT Security, Procurement, Legal and Compliance.
• Conduct supplier audits and support regulatory audits.
• Identify improvements to increase partners' security maturity.
• Monitor trends and regulatory requirements such as NIS2, DORA and ISO 27001.

Kenntnisse

Vendor Management

Third-Party Risk Management

Cybersecurity Standards Knowledge

Contract Negotiation

Sales Success in Security Technologies

Ausbildung

University degree in Computer Science / IT Security / BIS or equivalent

Tools

IAM

SIEM

Cloud Security

Endpoint Security

Jobbeschreibung

• Build and further develop a strategic vendor ecosystem in the cybersecurity sector
• Evaluate and select security service providers and technology partners
• Conduct third-party risk assessments and security evaluations
• Manage and monitor security requirements for suppliers
• Develop and monitor KPIs, SLAs, and vendor scorecards
• Support contract negotiations, focusing on security and compliance requirements
• Collaborate with IT Security, Procurement, Legal, and Compliance
• Conduct supplier audits and support regulatory audits
• Identify and implement improvement measures to increase partners' security maturity
• Monitor current cybersecurity trends and regulatory requirements such as NIS2, DORA, and ISO 27001
• Plan and execute necessary sales activities in coordination with manufacturers
• Take responsibility for sales success and growth across the company's portfolio

Requirements

• University degree in Computer Science, IT Security, Business Information Systems, or a comparable qualification
• Several years of experience in vendor management, third-party risk management, or the cybersecurity sector
• In-depth knowledge of relevant security standards and frameworks, such as ISO 27001, NIST, and CIS Controls
• Demonstrated success selling security technologies in the SOC and OT environments
• Experience working with regulatory requirements, such as GDPR, NIS2, and DORA
• Strong technical understanding of cybersecurity technologies, such as IAM, SIEM, cloud security, and endpoint security
• Experience negotiating contracts and SLAs with IT or security service providers
• Ability to work independently and take ownership of responsibilities
• Strong analytical and strategic thinking skills
• Excellent communication and presentation skills
• Strong negotiation and assertiveness skills
• Ability to explain complex technical topics clearly and effectively
• Structured and solution-oriented approach to work
• Strong team orientation and confident stakeholder management skills
• Active network of resellers
• Certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Auditor are desirable
• Experience in regulated industries, such as financial services, critical infrastructure (KRITIS), or telecommunications, is desirable
• Experience with international supplier structures is desirable

Core Competencies

Demonstrates expertise in vendor management and third-party risk assessments within the cybersecurity sector, with a strong focus on compliance with standards such as ISO 27001, NIS2, and DORA. Proven ability to negotiate contracts and manage security requirements while fostering strategic partnerships.

Highest-signal resume keywords

• Vendor Management
• Third-Party Risk Management
• Cybersecurity Standards Knowledge
• Contract Negotiation
• Sales Success in Security Technologies

ATS Optimization Keywords

Hard Skills

• Third-Party Risk Assessment
• Security Evaluations
• KPI Development
• SLA Management
• Cybersecurity Technologies
• IAM
• SIEM
• Cloud Security
• Endpoint Security
• Regulatory Compliance

Soft Skills

• Analytical Thinking
• Strategic Thinking
• Communication Skills
• Negotiation Skills
• Stakeholder Management

Certifications & Qualifications

• CISSP
• CISM
• CRISC
• ISO 27001 Lead Auditor

Industry Keywords

• Cybersecurity
• Financial Services
• Critical Infrastructure
• Telecommunications
• Regulatory Audits
• Supplier Audits
• NIS2
• DORA
• GDPR
• CIS Controls