Third-Party Risk Specialist (ICT & Contracts)

Lunar Denmark; København, Aarhus; Presencial; DKK 700.000 - 1.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

4 days in the office

State of the art equipment

Pension and health insurance

Enhanced parental leave

Descripción de la vacante

Lunar Denmark is seeking a Third Party Risk Management Specialist to own the vendor risk across the lifecycle, working with procurement, ICT, and Legal. Based in Aarhus, you will ensure contracts reflect risk, that SLAs and exit rights are in place, and you’ll track performance and risk through assurance reports.

You will evaluate ICT services, cloud and data location, manage exits, and report to management and Danish FSA. Fluency in English is required; Danish is a strong plus.

Formación

• 3-5 years in vendor management, contract management, outsourcing, procurement or third party risk, with a large share of it on ICT or technology vendors, ideally in a bank, payment institution or other regulated company.
• A background in law, business, contract management or vendor management, for example cand.merc.jur. or a similar combination, or equivalent practical experience.
• A working knowledge of DORA's ICT third party risk requirements and the EBA outsourcing guidelines, or solid experience from another regulated sector and the drive to master them quickly.
• You read a contract and spot what's missing, you've managed vendors after the signature as well as before it, and you have enough technical understanding to talk to engineers about cloud, SaaS, subcontracting and data location, including judging what an assurance report does and does not cover.
• A strong writer who's comfortable challenging vendors, business owners and senior stakeholders. Fluent in English; Danish or another Scandinavian language is a strong plus.

Responsabilidades

• Assess before we sign. Run risk-based classification, due diligence and risk assessments as part of procurement, with a sharp eye for ICT services that support critical or important functions, including cloud, subcontracting chains and where our data sits.
• Set the contract requirements. Turn the risk picture into contract requirements together with Legal, including DORA Article 30 terms, SLAs, audit rights and exit rights, and support the business in negotiations.
• Follow up after we sign. Track performance against SLAs, run vendor reviews with business owners, follow ICT incidents, assurance reports such as ISAE 3402 and SOC 2, and security test results, and reassess when something changes.
• Keep the register and exit plans right. Own the DORA register of information and our ICT concentration risk input, and make sure ICT services supporting critical or important functions have exit strategies that would actually work.
• Be the go-to person for third party risk. Report to management, answer to 2nd line, internal audit and the Danish FSA, and improve the process while you run it.

Conocimientos

Vendor management

Contract management

Procurement

Risk assessments

DORA ICT risk

Contract negotiation

Communication with stakeholders

English fluency

Educación

Law background

Herramientas

ISAE 3402

SOC 2

Descripción del empleo

Lunar Denmark is seeking a Third Party Risk Management Specialist to own the vendor risk across the lifecycle, working with procurement, ICT, and Legal. Based in Aarhus, you will ensure contracts reflect risk, that SLAs and exit rights are in place, and you’ll track performance and risk through assurance reports.

You will evaluate ICT services, cloud and data location, manage exits, and report to management and Danish FSA. Fluency in English is required; Danish is a strong plus.