Senior Third-Party Security & Risk Leader

Experis; Wrocław; Hybrid; PLN 240,000 - 360,000; Full time

Job summary

Experis is seeking an experienced cybersecurity risk professional to lead third‑party security assessments and risk management across the supplier lifecycle. You will review vendor documentation, advise stakeholders, and help strengthen governance, controls and compliance with regulatory requirements.

The role requires collaboration with procurement, legal and cybersecurity teams, monitoring threats and adopting best practices to mitigate risks in a large enterprise environment.

Qualifications

• Minimum 5 years in cybersecurity or IT risk management.
• At least 3 years in third‑party security assessments or vendor risk management.
• Familiarity with ISO 27001, NIST CSF, SOC 2, NIS2, DORA and CIS Controls.
• Excellent English and strong communication skills.

Responsibilities

• Conduct security risk assessments of third-party suppliers, products and services, including SaaS, cloud, COTS, hardware and OT solutions.
• Review supplier security documentation, identify risks and non‑compliance, and provide risk‑based recommendations.
• Collaborate with suppliers and internal stakeholders to address security concerns and ensure compliance with corporate requirements.
• Advise procurement, legal, compliance, business and cybersecurity teams on third‑party security risks throughout the supplier lifecycle.
• Improve TPRM processes, assessment methodologies and security governance practices.
• Monitor emerging threats, regulations and industry best practices.

Skills

Analytical skills

Problem-solving

Communication skills

English proficiency

Cybersecurity knowledge

TPRM methodologies

Security frameworks

Education

CISSP

SSCP

CISM

CRISC

ISO 27001 Lead Auditor / Lead Implementer

Job description

Experis is seeking an experienced cybersecurity risk professional to lead third‑party security assessments and risk management across the supplier lifecycle. You will review vendor documentation, advise stakeholders, and help strengthen governance, controls and compliance with regulatory requirements.

The role requires collaboration with procurement, legal and cybersecurity teams, monitoring threats and adopting best practices to mitigate risks in a large enterprise environment.