Senior TPRM Lead: Cyber Risk & Supplier Security

Eneco; Rotterdam; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Eneco, a leading European sustainable energy company, is seeking a senior TPRM Lead for the Rotterdam area. You will own end-to-end third-party risk management from governance to supplier assessments and continuous monitoring, ensuring security controls are embedded in procurement and governance processes.

You will collaborate across Legal, Compliance, Risk, IT, Data Privacy, and Procurement within the CISO Office, influencing at senior levels and driving a mature program capable of scaling with

Qualifications

• 5+ years hands-on experience in Third Party Risk Management.
• 7+ years in Cyber Security, IT Risk, Information Security, or GRC.
• Proven track record leading or maturing a TPRM programme in a large enterprise.
• Experience influencing senior stakeholders and embedding security controls into procurement and supplier governance processes.
• Familiarity with critical infrastructure or regulated sector environments is a strong plus.

Responsibilities

• Own the TPRM framework end-to-end - policies, standards, procedures, risk registers, and playbooks.
• Lead governance forums and steer risk-based decision-making and risk acceptance processes.
• Define and track KPIs, KRIs, and executive dashboards for supplier risk visibility.
• Drive continuous improvement across the full third-party lifecycle - onboarding through offboarding.
• Embed mandatory security review gates into procurement and align with NIS2, DORA, ISO 27001, NIST, and GDPR.

Skills

Ownership mindset

Executive presence

Analytical and data-driven

Automation mindset

Collaborative

Tools

ServiceNow GRC

OneTrust

Archer

ProcessUnity

Job description

Eneco, a leading European sustainable energy company, is seeking a senior TPRM Lead for the Rotterdam area. You will own end-to-end third-party risk management from governance to supplier assessments and continuous monitoring, ensuring security controls are embedded in procurement and governance processes.

You will collaborate across Legal, Compliance, Risk, IT, Data Privacy, and Procurement within the CISO Office, influencing at senior levels and driving a mature program capable of scaling with