Senior Third-Party Security & Risk Manager – Hybrid (Wroclaw)

Ework Group; Wrocław; Hybrid; PLN 240,000 - 360,000; Full time

Job summary

Ework Group in Poland seeks a Senior IT Security & Risk Officer (Third-Party Risk Management) in Wrocław with hybrid work arrangement (2 days in office). The role focuses on assessing external suppliers and services, guiding onboarding, and strengthening the TPRM framework to align with security standards.

The candidate will review vendor documentation, perform risk assessments, and collaborate with procurement, legal and cybersecurity teams to enforce security controls and governance.

Qualifications

• Experience in cybersecurity, information security, IT risk management or related fields.
• Minimum 3 years performing third-party security assessments or supplier risk reviews.
• Ability to translate technical findings into actionable risk decisions.
• Experience in large enterprises with governance processes and multiple stakeholders.
• Proven ability to work with external suppliers and manage risk discussions.
• Familiarity with ISO 27001, NIST CSF, SOC 2, NIS2, DORA, CIS Controls and AI governance.
• Excellent written and verbal English communications.

Responsibilities

• Assess security posture of external suppliers, products and services (SaaS, COTS, cloud, hardware, OT).
• Review supplier responses, documentation and security reports to evaluate risk posture.
• Provide risk-based recommendations and remediate non-compliance points.
• Engage with suppliers and internal stakeholders on security and risk matters.
• Lead onboarding and lifecycle management for third-party risk.
• Collaborate with procurement, legal, compliance and cybersecurity teams to enforce security requirements.
• Identify gaps in the TPRM process and drive improvements.
• Monitor threats, regulatory changes and industry best practices.

Skills

Cybersecurity

IT risk management

Third-party risk management

Stakeholder collaboration

English communication

Job description

Ework Group in Poland seeks a Senior IT Security & Risk Officer (Third-Party Risk Management) in Wrocław with hybrid work arrangement (2 days in office). The role focuses on assessing external suppliers and services, guiding onboarding, and strengthening the TPRM framework to align with security standards.

The candidate will review vendor documentation, perform risk assessments, and collaborate with procurement, legal and cybersecurity teams to enforce security controls and governance.