Third Party Risk Management Consultant

Are you an experienced Risk Management professional with solid cybersecurity knowledge of ISO 27001?

emagine has an opportunity for you to drive the move of a third-party cyber risk process from an external provider to an in-house model, supporting NIS 2 compliance, with a global team.

Skills & Experience

• Senior risk management background, with an internal audit style approach
• Solid cybersecurity and information security knowledge, ideally with an ISO 27001-type certification
• Experience reviewing supplier questionnaires and evidence, and documenting risks and gaps
• Experience following up on remediation plans and exceptions
• Strong communicator, comfortable managing many internal and external stakeholders: procurement, suppliers…
• Working knowledge of NIS 2 and supply-chain cybersecurity expectations
• Fully fluent in written and spoken English
• Nice to have: familiarity with NIST CSF and SOC 2, and with TPRM or GRC tooling

Tasks & Deliverables

• Finalise and roll out the TPRM process, then run it day to day
• Send questionnaires to suppliers and review answers and evidence
• Document risks and gaps, and follow up on remediation and exceptions
• Respond to cybersecurity questionnaires received from customers
• Own the topic and work with stakeholders across the business, including procurement

Why this role?

• A hands-on role where you shape the process and run it
• Real ownership of a topic with visible business impact
• Collaborative, enabling team that values autonomous, self-starting professionals
• 6-month contract, with a possible extension or conversion to permanent

Other details

• Location: Portugal, Lisbon ideal to spend 2 days per week in office

Spain and fully remote in Europe possible

• Start: ASAP
• Duration: 6 months, possible extension
• expected rate €300 - 400 per day

Apply with your latest CV or reach out to Brendan to find out more.