Senior Third-Party Security & Risk Lead

Cloudflare; Lisboa; On-site; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Equal opportunity employer

Diversity and inclusiveness commitment

Disability accommodations available

Job summary

A global cybersecurity company in Lisbon is seeking a Security Third Risk Management Specialist to manage vendor security reviews, address third-party risks, and support certification audits. Ideal candidates should have 5-8 years of experience in Security Governance, Risk, and Compliance, with a strong ability to analyze security documentation such as ISO 27001 and SOC 2. This role includes opportunities for collaboration across various teams and the possibility of occasional travel to global locations.

Qualifications

• 5-8 years experience in Security Governance, Risk, and Compliance (GRC).
• Experience with ISO 27001, SOC 2, PCI DSS audit reports.
• Ability to work independently and possess a sense of curiosity.

Responsibilities

• Execute vendor security reviews and document findings.
• Identify third-party security risks and recommend options.
• Maintain Cloudflare’s Vendor Master list of critical vendors.

Skills

Vendor security documentation review

Identification of security risks

Organizational skills

Analytical skills

Interpersonal skills

Job description

A global cybersecurity company in Lisbon is seeking a Security Third Risk Management Specialist to manage vendor security reviews, address third-party risks, and support certification audits. Ideal candidates should have 5-8 years of experience in Security Governance, Risk, and Compliance, with a strong ability to analyze security documentation such as ISO 27001 and SOC 2. This role includes opportunities for collaboration across various teams and the possibility of occasional travel to global locations.