Strategic Vendor Risk Lead for TPRM & Security Programs

outsystems; Portugal; Vor Ort; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

OutSystems is seeking a Lead Analyst to manage and mature two critical programmes within our Security function. You will guide the Third-Party Risk Management (TPRM) strategy, mentor colleagues, and enable enterprise risk activities across the vendor ecosystem.

You'll partner with Digital, Procurement, Legal and Engineering, embed Security by Design, maintain risk registers, support audits for ISO 27001 and SOC 2, and drive scalable GRC improvements in a rapidly evolving, agentic enterprise

Qualifikationen

• Bachelor's degree in Information Security or related field.
• 7–10 years of risk management experience with 3–4 years in TPRM.
• Strong knowledge of ISO 27001, ISO 31000, SOC 2, and NIST.
• Certifications such as CRISC, CISM, CISSP, CISA or ISO 27001 Lead Auditor/Implementer preferred.
• Ability to lead autonomously and mentor junior team members.

Aufgaben

• Define our TPRM strategy, including risk tiering, assessment frameworks, and monitoring cadences for critical vendors.
• Embed Security by Design: Partner with Digital, Procurement, Legal, and Engineering teams to integrate risk requirements into vendor selection and contracting.
• Manage Enterprise Risk: Evolve the division's risk register, facilitating workshops with business leaders to identify emerging risks and validate controls.
• Ensure Audit Readiness: Act as the primary point of contact for internal and external audits, supporting certifications such as ISO 27001, SOC 2, and regional frameworks.
• Optimise Operations: Architect improvements in evidence collection, risk tracking, and GRC tooling to reduce manual effort and build scalable operating procedures.
• Monitor the Landscape: Assess the applicability of emerging regulatory requirements (e.g., DORA, NIS2, GDPR) and translate them into actionable programme changes.

Kenntnisse

Vendor risk management

Regulatory compliance

Cross-functional leadership

Security by design

Ausbildung

Bachelor's degree in Information Security or related field

Tools

ISO 27001

ISO 31000

NIST

SOC 2

Jobbeschreibung

OutSystems is seeking a Lead Analyst to manage and mature two critical programmes within our Security function. You will guide the Third-Party Risk Management (TPRM) strategy, mentor colleagues, and enable enterprise risk activities across the vendor ecosystem.

You'll partner with Digital, Procurement, Legal and Engineering, embed Security by Design, maintain risk registers, support audits for ISO 27001 and SOC 2, and drive scalable GRC improvements in a rapidly evolving, agentic enterprise