Senior TPRM Leader – Governance, Risk & Automation

Eneco; Rotterdam; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Eneco is seeking a senior TPRM Lead to own and mature the end-to-end Third Party Risk Management programme from governance to supplier assessments and continuous monitoring. You will collaborate with Procurement, Legal, Compliance, Risk, Data Privacy, and IT, influencing senior stakeholders and embedding controls across the supplier lifecycle.

With NIS2 and DORA as operational realities, you will drive risk visibility and remediation across a broad ecosystem, delivering executive-ready reporting

Qualifications

• 5+ years in Third Party Risk Management.
• 7+ years in Cyber Security, IT Risk, Information Security, or GRC.
• Proven track record maturing a TPRM programme in a large enterprise.
• Experience influencing senior stakeholders and embedding security controls into procurement and supplier governance.
• Familiarity with critical infrastructure or regulated sector environments is a strong plus.

Responsibilities

• Own the TPRM framework end-to-end - policies, standards, procedures, risk registers, and playbooks.
• Lead governance forums and steer risk-based decision-making and risk acceptance processes.
• Define and track KPIs, KRIs, and executive dashboards for supplier risk visibility.
• Drive continuous improvement across the third-party lifecycle from onboarding to offboarding.
• Perform and oversee security assessments of suppliers and review reports and plans.

Skills

TPRM expertise

Executive presence

Analytical mindset

Automation mindset

Collaborative

Tools

ServiceNow GRC

OneTrust

Archer

ProcessUnity

Job description

Eneco is seeking a senior TPRM Lead to own and mature the end-to-end Third Party Risk Management programme from governance to supplier assessments and continuous monitoring. You will collaborate with Procurement, Legal, Compliance, Risk, Data Privacy, and IT, influencing senior stakeholders and embedding controls across the supplier lifecycle.

With NIS2 and DORA as operational realities, you will drive risk visibility and remediation across a broad ecosystem, delivering executive-ready reporting