Hybrid Third-Party Cyber Risk & Governance Lead

Adidas; Zaragoza; Hybride; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Adidas in Spain is seeking a Manager Information Security Governance to lead the Third Party Information Security Risk Management and related governance activities. You will partner with technology, business, and brand teams to enforce policies, reduce risks, and drive audit readiness.

The role requires coordinating security assessments for third parties and embedding security controls across the supplier lifecycle.

Qualifications

• 5+ years of information security, IT risk, cyber risk, third party risk management, audit, compliance or governance.
• 3+ years of supplier security assessments, vendor risk management, GRC processes or operational risk management.
• Experience working in global, matrixed organizations with cross-functional stakeholders.

Responsabilités

• Own and maintain the Third Party Information Security Risk Management process, including procedures, assessment methodology, templates, playbooks and supporting documentation.
• Define risk-based assessment criteria, supplier segmentation and prioritization logic based on data sensitivity, service criticality, access type, hosting model and business impact.
• Drive process improvement initiatives to increase assessment quality and scope, cycle time, stakeholder experience and audit readiness.
• Coordinate the annual review of the TPRM framework, ensuring alignment with information security policies, enterprise risk management and relevant regulatory expectations.
• Lead and coordinate security due diligence for new and existing third parties, including suppliers, outsourced service providers, technology vendors, cloud providers and strategic partners.
• Review third party evidence such as security questionnaires, ISO 27001 certificates, SOC reports, penetration test summaries, business continuity documentation, data protection evidence and remediation plans.

Connaissances

Info security

Risk management

Supplier risk

Stakeholder mgmt

Communication

Outils

GRC tools

TPRM platforms

Description du poste

Adidas in Spain is seeking a Manager Information Security Governance to lead the Third Party Information Security Risk Management and related governance activities. You will partner with technology, business, and brand teams to enforce policies, reduce risks, and drive audit readiness.

The role requires coordinating security assessments for third parties and embedding security controls across the supplier lifecycle.