Third Party Risk Management Consultant (h/f)

Are you an experienced Risk Management professional with solid cybersecurity knowledge of ISO 27001?

emagine has an opportunity for you to drive the move of a third-party cyber risk process from an external provider to an in-house model, supporting NIS 2 compliance, with a global team.

Skills & Experience

• Senior risk management background, with an internal audit style approach

• Solid cybersecurity and information security knowledge, ideally with an ISO 27001-type certification

• Experience reviewing supplier questionnaires and evidence, and documenting risks and gaps

• Experience following up on remediation plans and exceptions

• Strong communicator, comfortable managing many internal and external stakeholders: procurement, suppliers…

• Working knowledge of NIS 2 and supply-chain cybersecurity expectations

• Fully fluent in written and spoken English

• Nice to have: familiarity with NIST CSF and SOC 2, and with TPRM or GRC tooling

Tasks & Deliverables

• Finalise and roll out the TPRM process, then run it day to day

• Send questionnaires to suppliers and review answers and evidence

• Document risks and gaps, and follow up on remediation and exceptions

• Respond to cybersecurity questionnaires received from customers

• Own the topic and work with stakeholders across the business, including procurement

Why this role?

• A hands-on role where you shape the process and run it

• Real ownership of a topic with visible business impact

• Collaborative, enabling team that values autonomous, self-starting professionals

• 6-month contract, with a possible extension or conversion to permanent

Other details

• Location: Portugal, Lisbon ideal to spend 2 days per week in office
  Spain and fully remote in Europe possible

• Start: ASAP

• Duration: 6 months, possible extension

• expected rate €300 - 400 per day

Apply with your latest CV or reach out to Brendan to find out more.