Third Party Risk Manager

• Govern and manage IT vendor relationships concerning performance on the security aspects of underlying contractual obligations
• Execute Vendor Security Risk Assessments and perform necessary follow-up actions, focusing on material risks
• Ensure that information security risks are identified and managed effectively throughout all stages of the relationship with external vendors
• Review the applicability and quality level of assurance reports issued by third parties
• Manage the IT security-related part of vendor contracts, working closely with 2nd line functions such as legal, compliance, and procurement on contractual changes
• Actively stay up-to-date with emerging cyber security trends, risk, and threat developments, and share this knowledge to help integrate them into the assessment program
• Help solve security-related questions, take initiative, and escalate in time if needed
• Signal improvements related to the way of working inside the team and contribute to improving the excellence of the service offering
• Work according to the DevOps & Agile methodology, improving Supply Chain Security services based on user stories
• Occasionally investigate and resolve incidents as they occur
• Engage frequently with various stakeholders, including other IT departments, business colleagues, and software suppliers

• Knowledge and experience with setting up projects & deliverables within supply chain security / Third-Party Risk Management (TPRM)
• Proven experience in executing information security risk assessments
• Knowledgeable on one or more areas such as security processes, technology architectures, network security, application security, and vulnerability management
• Experience with the ServiceNow TPRM module is a significant advantage
• HBO or University degree
• Excellent stakeholder management skills
• A strong ability to translate technical risks into business risks and vice versa
• Hands-on, self-organised, willing to finish and deliver (execution power)
• Service-oriented professional who enjoys taking on an internal consultancy role
• The working language within the team is English

Experience with the ServiceNow TPRM module