Senior Third-Party Cyber Risk Lead

ITConnect; Wrocław; Hybrid; PLN 180,000 - 280,000; Full time

Job summary

ITConnect is seeking a Senior Third-Party Risk Management specialist to assess security posture of external suppliers, products and services, and advise on risk-based decisions throughout onboarding and lifecycle. You will work with procurement, legal, compliance and cybersecurity teams across global suppliers, applying ISO 27001, NIST CSF, SOC 2, and emerging frameworks like NIS2 and EU AI Act.

The role requires strong communication in English and experience in large enterprise environments

Qualifications

• Minimum 5 years of professional experience in cybersecurity, information security or IT risk management.
• Minimum 3 years of hands-on experience performing third-party security assessments.
• Experience analyzing security documentation and delivering risk-based decisions.
• Experience in large enterprise environments with multiple stakeholders.
• Experience collaborating with external suppliers on security discussions.

Responsibilities

• Perform security risk assessments of third-party suppliers, products and services.
• Review supplier responses, technical documentation and security reports to evaluate posture.
• Translate findings into actionable risk decisions and recommendations.
• Engage with suppliers and internal stakeholders on security, compliance and risk matters.
• Collaborate with procurement, legal, compliance, business and cybersecurity teams.
• Drive continuous improvement of the TPRM process and assessment practices.
• Monitor emerging threats and regulatory requirements to keep the framework up to date.

Skills

Security risk assessments

Stakeholder management

Risk-based recommendations

English communication

Job description

ITConnect is seeking a Senior Third-Party Risk Management specialist to assess security posture of external suppliers, products and services, and advise on risk-based decisions throughout onboarding and lifecycle. You will work with procurement, legal, compliance and cybersecurity teams across global suppliers, applying ISO 27001, NIST CSF, SOC 2, and emerging frameworks like NIS2 and EU AI Act.

The role requires strong communication in English and experience in large enterprise environments