Own full vendor risk lifecycle: due diligence, security questionnaires, risk ratings
Maintain supplier register and drive reassessment cadence
Track fourth-party dependencies; align with DORA ICT & ISO 27001
Support ISMS policy, control mapping, and evidence for audits
Execute ISO 31000-based risk assessments and RCSA activities
Support RoPA, DPIAs, and data subject requests with vendors

🎯 Requirements

Proven GRC, IT audit, or vendor risk experience
Vendor due diligence and security questionnaire expertise (SIG/CAIQ)
Knowledge of ISO 27001:2022, ISO 31000, GDPR; DORA familiarity
Independent thinker, identify gaps, propose improvements
Pragmatic, business-focused GRC with momentum
Strong written communication across risk memos and questionnaires

🎁 Benefits

Autonomy to shape third-party risk management
Cross-functional collaboration with security, procurement, and product
Opportunity to build scalable GRC processes

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Legal Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot