Third Party Risk Management expert

Inetum Portugal

4h

About The Position

Inetum is seeking a Third-Party Cyber Risk Management Specialist to help implement and operate its internal third-party risk management (TPRM) framework. The role supports the TPRM operating model and manages cybersecurity risk assessments of new and existing suppliers throughout the supplier lifecycle. It also coordinates security questionnaire responses, maintains auditable records, contributes to risk reporting, and works with internal teams and external suppliers to improve and streamline the TPRM process.

Requirements

• Experience in TPRM, cybersecurity risk, IT audit, security assurance, or GRC.
• Knowledge of supplier risk assessments, security controls, ISO/IEC 27001, and SOC 2.
• Strong analytical, communication, stakeholder management, and reporting skills.

Responsibilities

• Support the implementation and continuous improvement of the TPRM operating model.
• Perform cybersecurity risk assessments of new and existing suppliers.
• Review security questionnaires and evidence, including ISO/IEC 27001 certificates, SOC 2 reports, penetration test summaries, and security policies.
• Identify control gaps and define remediation actions, compensating controls, and risk escalation requirements.
• Manage supplier assessments from onboarding and inherent risk screening through remediation, reassessment, and offboarding.
• Coordinate cybersecurity questionnaire responses for customers and partners.
• Maintain auditable records and support risk reporting through KPIs and KRIs.
• Work closely with GRC, Cybersecurity, Procurement, Legal, Business Owners, and suppliers.
• Identify opportunities to automate and streamline the TPRM lifecycle.
• Support knowledge transfer to the internal GRC team.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed