Vendor Security Risk Manager

JT International S.A.; Poland; On-site; PLN 224,803 - 299,737; Full time

Job summary

JT International S.A. is seeking a Third Party Security Risk Manager responsible for managing the Third-Party Security Risk Management program. The role involves ensuring vendors meet JTI's cybersecurity, compliance, and risk management requirements.

This position requires strong analytical skills, excellent communication abilities, and a bachelor's degree in a related field. Candidates should have over 5 years of experience in cybersecurity or risk management, along with relevant professional certifications.

Qualifications

• 5+ years experience in cybersecurity, risk management or related fields.
• Strong understanding of NIST, ISO 27001, and GDPR.
• Experience supporting cloud security assessments.

Responsibilities

• Conduct cybersecurity risk assessments for third-party vendors.
• Ensure third-party compliance with applicable frameworks and policies.
• Document identified security risks and control deficiencies.

Skills

Fluent English written and spoken

Strong analytical skills

Risk assessment skills

Excellent written and verbal communication

Organizational skills

Stakeholder management skills

Education

Bachelor's degree in Cybersecurity or related field

Professional certifications (CISSP, CISM, etc.)

Tools

Governance, Risk, and Compliance (GRC) tools

Job description

JT International S.A. is seeking a Third Party Security Risk Manager responsible for managing the Third-Party Security Risk Management program. The role involves ensuring vendors meet JTI's cybersecurity, compliance, and risk management requirements.

This position requires strong analytical skills, excellent communication abilities, and a bachelor's degree in a related field. Candidates should have over 5 years of experience in cybersecurity or risk management, along with relevant professional certifications.