Senior TPRM Leader: Scale Third-Party Cyber Risk

Eneco; Rotterdam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Rotterdam HQ access

Job summary

Eneco is seeking a senior TPRM Lead to own the end-to-end third-party risk programme within the CISO Office. You will partner with Procurement, Legal, Compliance, Risk, Data Privacy and IT to mature the framework and drive measurable risk visibility across the supplier ecosystem.

In a hybrid setup with Eneco's Rotterdam HQ, you will influence senior stakeholders, embed security controls into procurement, and steer remediation across the lifecycle, from onboarding to offboarding, while aligning

Qualifications

• 5+ years hands-on experience in Third Party Risk Management
• 7+ years in Cyber Security, IT Risk, Information Security, or GRC
• Proven track record maturing a TPRM programme in a large enterprise
• Experience influencing senior stakeholders and embedding controls into procurement
• Familiarity with critical infrastructure or regulated environments is a strong plus

Responsibilities

• Own the TPRM framework end-to-end including policies, procedures, risk registers and playbooks
• Lead governance forums and risk-based decision processes
• Define KPIs, KRIs and executive dashboards for supplier risk visibility
• Drive continuous improvement across onboarding to offboarding
• Perform and oversee security assessments of suppliers and define remediation needs
• Maintain risk registers, manage exceptions and remediation tracking
• Embed security review gates into procurement and align with regulations
• Own and optimise the TPRM/GRC platform and reporting capabilities

Skills

Ownership mindset

Executive presence

Analytical

Automation mindset

Collaborative

Education

CISSP

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

CTPRP (strong plus)

Tools

ServiceNow GRC

OneTrust

Archer

ProcessUnity

Job description

Eneco is seeking a senior TPRM Lead to own the end-to-end third-party risk programme within the CISO Office. You will partner with Procurement, Legal, Compliance, Risk, Data Privacy and IT to mature the framework and drive measurable risk visibility across the supplier ecosystem.

In a hybrid setup with Eneco's Rotterdam HQ, you will influence senior stakeholders, embed security controls into procurement, and steer remediation across the lifecycle, from onboarding to offboarding, while aligning