Third Party Risk Management Manager (Poznań - hybrid)

O projekcie We are seeking an experienced Third-Party Risk Management (TPRM) Manager to lead and evolve our enterprise TPRM program. This role will drive TPRM strategy, operations, reporting, supplier incident management, M&A risk integration, and governance initiatives while ensuring effective execution of OneTrust assessments and BitSight operations. The ideal candidate will leverage automation, AI-enabled solutions, and innovative approaches to enhance efficiency, risk visibility, and decision-making. Strong leadership, stakeholder management, team development, and hiring experience are essential to build a high-performing TPRM function and deliver measurable business outcomes.

What we offer

• Hybrid working model (2 days in the office and 3 days working remotely)
• Stable employment with an employment contract, private medical care, and a benefits package including MultiSport and a benefits platform
• Opportunity to work in an international environment and collaborate with experienced Grant Thornton experts and professionals from around the world
• A culture based on teamwork, trust, and knowledge sharing
• A well-structured onboarding program to support a smooth start and successful integration into your new role
• Clear career development paths and access to learning and certification programs
• Access to training platforms and tools that support professional growth
• An inclusive workplace that welcomes people with disabilities
• A modern office in Poznań, located in Malta Office Park

Why join Grant Thornton Global Delivery Center Poland

At Grant Thornton Global Delivery Center Poland (GDC), you’ll contribute to meaningful work that moves businesses forward. From day one, you’ll help deliver value for clients while helping shape the future of a growing delivery center in Poland.

Through supporting operations of our growing multinational platform, you’ll have opportunities to tackle complex projects, work with advanced technologies and develop new skills while expanding your experience. You’ll collaborate across countries, markets and time zones, learning from different perspectives and building experience beyond their roles.

At GDC Poland, you’ll be part of a team that succeeds together. Knowledge is shared, diverse perspectives are valued, and team members support one another in doing their best work.

Clear career paths, learning opportunities and international exposure will help you continue building your skills, expanding your capabilities and growing a rewarding career.

About Grant Thornton

Grant Thornton provides audit and assurance, tax and advisory services through the member firms of the Grant Thornton International Ltd (GTIL) network. Wherever business operates, the network is there, with member firm capabilities in more than 150 markets worldwide.

Within the network, the Grant Thornton Advisors multinational platform is a group of firms that connects priority markets and operates with aligned standards, technology and delivery expectations. For work that crosses borders, this helps support collaboration and coordination across markets. Platform firms operate as separate legal entities.

Zakres obowiązków

• Lead and evolve the EMEA Third-Party Risk Management (TPRM) program, aligning strategy with regulatory, business, M&A, and InfoSec Supply Chain Risk Management objectives.
• Oversee end-to-end TPRM operations, including due diligence, risk assessments, reassessments, exception management, SLA performance, and operational scalability.
• Develop and deliver executive, regulatory, and operational reporting, providing actionable risk insights and ensuring data accuracy and traceability.
• Lead TPRM integration for M&A activities, including acquisition due diligence, supplier risk assessments, onboarding into TPRM frameworks, and Day-0/30/90 integration objectives.
• Own the supplier security incident management framework, coordinating breach response, impact assessments, remediation, and executive reporting.
• Drive AI, automation, and innovation initiatives to improve efficiency, decision-making, risk visibility, and operational effectiveness across TPRM processes.
• Own and optimize OneTrust TPRM workflows, assessments, questionnaires, control mappings, and platform integrations.
• Govern continuous supplier monitoring through BitSight and similar tools, driving risk-based supplier engagement, remediation, and executive reporting.
• Define, track, and continuously improve TPRM KPIs, KRIs, maturity metrics, and performance reporting.
• Build and lead a high-performing TPRM organization through hiring, workforce planning, mentoring, coaching, succession planning, and stakeholder engagement.

Wymagania Required Qualifications

• 10+ years of experience in Third-Party Risk Management (TPRM), Supply Chain Risk Management, Information Security Risk, Governance, Risk & Compliance (GRC), or related cybersecurity functions.
• Demonstrated experience leading enterprise-scale TPRM programs, operations, and governance frameworks across multiple regions and business units.
• Strong expertise in supplier risk assessments, due diligence, risk reporting, incident management, and regulatory compliance requirements.
• Hands-on experience with OneTrust TPRM, third-party risk assessment methodologies, workflow configuration, and process optimization.
• Experience with continuous monitoring platforms such as BitSight and integrating security posture insights into risk management decisions.
• Proven leadership experience managing teams, driving organizational change, resolving complex stakeholder issues, and influencing executive-level decisions.
• Familiarity with AI tools, workflow automation platforms, and integrating AI into existing systems is preferred.
• Fluency in Polish and English

Preferred Qualifications

• Experience developing automation using Copilot or other Agentic AI frameworks
• Experience leading TPRM activities during mergers, acquisitions, divestitures, and integration programs.
• Knowledge of emerging risks including AI, cloud security, geopolitical risk, privacy, and evolving regulatory requirements.
• Experience implementing automation, AI-driven workflows, analytics, and operational transformation initiatives within TPRM or cybersecurity programs.
• Familiarity with enterprise risk frameworks and standards such as ISO 27001, NIST, SOC 2, PCI DSS, and privacy regulations.
• Experience collaborating with Procurement, Legal, Privacy, Internal Audit, and Enterprise Risk Management teams.
• Strong executive communication skills with a proven ability to present complex risk concepts to senior leadership, boards, and auditors.

Soft Skills

• Strong analytical and problem-solving skills with the ability to manage multiple priorities in a fast-paced environment.
• Experience working within multinational environments with complex IT asset landscapes.
• Attention to detail and accuracy.
• Strong problem-solving and analytical abilities.
• Ability to translate compliance requirements into technical controls.
• Commitment to continuous improvement and maturity enablement of the program.

This is a hybrid role and regular visits to Poznań are required

Please note that CV in English is required.

Oferujemy

• Sport subscription
• Private healthcare
• Training budget
• Free coffee
• Bike parking
• Mobile phone
• In-house trainings
• Modern office