Tprm Security Assessor

TPRM Security Assessor

We are looking for an experienced TPRM Security Assessor to support a global security team in assessing and managing the cybersecurity risks associated with third-party vendors and suppliers.

This is a great opportunity for someone with a background in Third-Party Risk Management, Information Security, Cybersecurity Risk, IT Audit or GRC who enjoys assessing security controls and working with both technical and business stakeholders.

Key Responsibilities

Conduct third-party/vendor security assessments and due diligence

Review vendor security questionnaires and supporting evidence

Assess supplier controls across areas including:

Access Management

Vulnerability Management

Incident Response

Business Continuity

Security Monitoring

Data Protection

Review security assurance documentation such as SOC 2, ISO 27001, CAIQ and SIG

Identify security gaps, risks and control weaknesses

Document assessment findings and support risk remediation

Communicate findings and requirements clearly to vendors and internal stakeholders

Work closely with Security, Risk, Procurement, Legal and other business teams

Support ongoing vendor reassessments and third-party risk activities

Requirements

2+ years of experience in TPRM, Information Security, Cybersecurity Risk Management, IT Audit or GRC

Hands-on experience conducting vendor/supplier security assessments

Good understanding of cybersecurity controls and risk management

Experience reviewing security questionnaires and assurance reports

Knowledge of SOC 2, ISO 27001, CAIQ and/or SIG

Strong analytical, written and verbal communication skills

Strong stakeholder management skills

Ability to assess security risks and clearly communicate findings to technical and non-technical audiences

Desirable Certifications

CRISC

CISA

CISSP

ISO 27001 Lead Auditor

CTPRP

Location: Poland, with Warsaw preferred

If you're a TPRM, Vendor Risk, GRC or Cybersecurity Risk professional looking for your next opportunity, feel free to apply or message me directly.