Senior Third-Party Cyber Risk & Governance Manager

Link Group; Warszawa; On-site; PLN 180,000 - 260,000; Full time

Job summary

Link Group in Warsaw is seeking an experienced Third Party Risk & Governance Manager to lead the development and continuous improvement of cybersecurity risk management for external partners. You will collaborate with Cybersecurity, Procurement, Legal, IT and business teams to ensure risks are identified, assessed, monitored, and addressed throughout the relationship lifecycle.

This role emphasizes governance, risk scoring, process optimization, and clear guidance for diverse stakeholders across

Qualifications

• Experience in Third Party Risk Management, cybersecurity risk, or GRC.
• Understanding of third party cybersecurity risks and their impact on business operations.
• Knowledge of standards like NIST CSF, ISO 27001/27036, DORA, NIS2.
• Experience coordinating risk assessments, remediation activities and third party monitoring.
• Ability to collaborate with Procurement, Legal, Cybersecurity, IT and business stakeholders.
• Strong stakeholder management in international or matrix environments.
• Experience with operational program coordination and cross-functional collaboration.
• Ability to use KPIs, dashboards, and management reporting.
• Analytical and problem-solving skills with a focus on continuous improvement.
• Ability to translate risk and governance requirements into practical guidance.
• Structured, proactive, and independent working style.
• Strong written and verbal English communication skills.

Responsibilities

• Support the development and ongoing improvement of third party cybersecurity risk management processes.
• Coordinate third party risk assessments, classification activities, risk reviews, and remediation follow-up.
• Work with internal stakeholders to ensure consistent application of risk management requirements and security standards.
• Build effective relationships with Cybersecurity, Procurement, Legal, IT, business teams, and external partners.
• Support operational activities related to third party onboarding, assessment, monitoring, and risk treatment.
• Track identified risks, findings, remediation plans, exceptions, and outstanding actions.
• Monitor program effectiveness using KPIs, dashboards, progress reports, and management updates.
• Ensure that high-risk third parties and services receive appropriate attention and oversight.
• Identify process gaps, bottlenecks, and opportunities to improve efficiency, scalability, and risk visibility.
• Develop and maintain procedures, guidance materials, reporting standards, and governance documentation.
• Support risk escalation and decision-making related to third party cybersecurity exposure.
• Coordinate activities delivered by internal teams and external service providers.
• Translate governance requirements into practical actions for different stakeholder groups.
• Promote a consistent, risk-based approach to third party cybersecurity management.

Job description

Link Group in Warsaw is seeking an experienced Third Party Risk & Governance Manager to lead the development and continuous improvement of cybersecurity risk management for external partners. You will collaborate with Cybersecurity, Procurement, Legal, IT and business teams to ensure risks are identified, assessed, monitored, and addressed throughout the relationship lifecycle.

This role emphasizes governance, risk scoring, process optimization, and clear guidance for diverse stakeholders across