Third Party Risk Management Consultant (h/f)

Are you an experienced Risk Management professional with solid cybersecurity knowledge of ISO 27001?emagine has an opportunity for you to drive the move of a third-party cyber risk process from an external provider to an in-house model, supporting NIS 2 compliance, with a global team.

Skills & Experience

• Senior risk management background, with an internal audit style approach
• Solid cybersecurity and information security knowledge, ideally with an ISO 27001-type certification
• Experience reviewing supplier questionnaires and evidence, and documenting risks and gaps
• Experience following up on remediation plans and exceptions
• Strong communicator, comfortable managing many internal and external stakeholders: procurement, suppliers…Working knowledge of NIS 2 and supply-chain cybersecurity expectations
• Fully fluent in written and spoken English
• Nice to have: familiarity with NIST CSF and SOC 2, and with TPRM or GRC tooling
• Tasks & Deliverables
• Finalise and roll out the TPRM process, then run it day to daySend questionnaires to suppliers and review answers and evidence
• Document risks and gaps, and follow up on remediation and exceptions
• Respond to cybersecurity questionnaires received from customersOwn the topic and work with stakeholders across the business, including procurementWhy this role?

A hands-on role where you shape the process and run itReal ownership of a topic with visible business impact

• Collaborative, enabling team that values autonomous, self-starting professionals6-month contract, with a possible extension or conversion to permanent Other details
• Location: Portugal, Lisbon ideal to spend 2 days per week in office
• Spain and fully remote in Europe possible
• Start: ASAP
• Duration: 6 months, possible extensionexpected rate €300 - 400 per day Apply with your latest CV or reach out to Brendan to find out more.