Senior Third-Party Risk Consultant — Remote & Global Lead

emagine; Portugal; Remote; EUR 55,000 - 74,000; Full time

Job summary

emagine is seeking an experienced Risk Management professional with strong cybersecurity knowledge, including ISO 27001 familiarity, to drive the in-house TPRM program. You will move a third-party risk process in-house, align with NIS 2 requirements, and collaborate with a global team across procurement and security functions.

The role involves rolling out the TPRM process, sending supplier questionnaires, documenting risks, and following up on remediation and exceptions.

Qualifications

• Senior risk management background with an internal audit style approach
• Solid cybersecurity and information security knowledge, ideally with ISO 27001-type certification
• Experience reviewing supplier questionnaires and evidence, documenting risks and gaps
• Experience following up on remediation plans and exceptions, and managing stakeholders

Responsibilities

• Finalise and roll out the TPRM process, then run it day to day
• Send questionnaires to suppliers and review answers and evidence
• Document risks and gaps, and follow up on remediation and exceptions
• Respond to cybersecurity questionnaires from customers
• Own the topic and collaborate with procurement and other stakeholders

Skills

Senior risk management

Internal audit style

Cybersecurity

ISO 27001

Supplier questionnaires

Remediation tracking

Stakeholder management

NIS 2 knowledge

English proficiency

NIST CSF/SOC 2 familiarity

Job description

emagine is seeking an experienced Risk Management professional with strong cybersecurity knowledge, including ISO 27001 familiarity, to drive the in-house TPRM program. You will move a third-party risk process in-house, align with NIS 2 requirements, and collaborate with a global team across procurement and security functions.

The role involves rolling out the TPRM process, sending supplier questionnaires, documenting risks, and following up on remediation and exceptions.