Third Party Risk Management Consultant (h/f)

emagine; Portugal; Remote; EUR 55,000 - 74,000; Full time

Job summary

emagine is seeking an experienced Risk Management professional with strong cybersecurity knowledge, including ISO 27001 familiarity, to drive the in-house TPRM program. You will move a third-party risk process in-house, align with NIS 2 requirements, and collaborate with a global team across procurement and security functions.

The role involves rolling out the TPRM process, sending supplier questionnaires, documenting risks, and following up on remediation and exceptions.

Qualifications

• Senior risk management background with an internal audit style approach
• Solid cybersecurity and information security knowledge, ideally with ISO 27001-type certification
• Experience reviewing supplier questionnaires and evidence, documenting risks and gaps
• Experience following up on remediation plans and exceptions, and managing stakeholders

Responsibilities

• Finalise and roll out the TPRM process, then run it day to day
• Send questionnaires to suppliers and review answers and evidence
• Document risks and gaps, and follow up on remediation and exceptions
• Respond to cybersecurity questionnaires from customers
• Own the topic and collaborate with procurement and other stakeholders

Skills

Senior risk management

Internal audit style

Cybersecurity

ISO 27001

Supplier questionnaires

Remediation tracking

Stakeholder management

NIS 2 knowledge

English proficiency

NIST CSF/SOC 2 familiarity

Job description

Are you an experienced Risk Management professional with solid cybersecurity knowledge of ISO 27001? emagine has an opportunity for you to drive the move of a third-party cyber risk process from an external provider to an in-house model, supporting NIS 2 compliance, with a global team.

Skills & Experience

• Senior risk management background, with an internal audit style approach
• Solid cybersecurity and information security knowledge, ideally with an ISO 27001-type certification
• Experience reviewing supplier questionnaires and evidence, and documenting risks and gaps
• Experience following up on remediation plans and exceptions
• Strong communicator, comfortable managing many internal and external stakeholders: procurement, suppliers…
• Working knowledge of NIS 2 and supply-chain cybersecurity expectations
• Fully fluent in written and spoken English
• Nice to have: familiarity with NIST CSF and SOC 2, and with TPRM or GRC tooling

Tasks & Deliverables

• Finalise and roll out the TPRM process, then run it day to day
• Send questionnaires to suppliers and review answers and evidence
• Document risks and gaps, and follow up on remediation and exceptions
• Respond to cybersecurity questionnaires received from customers
• Own the topic and work with stakeholders across the business, including procurement

Why this role?

• A hands-on role where you shape the process and run it
• Real ownership of a topic with visible business impact
• Collaborative, enabling team that values autonomous, self-starting professionals
• 6-month contract, with a possible extension or conversion to permanent

Other Details

• Location: Portugal, Lisbon ideal to spend 2 days per week in office Spain and fully remote in Europe possible
• Start: ASAP
• Duration: 6 months, possible extension
• expected rate €300 - 400 per day