Technology Risk Consultant
Il y a 15 heures
Arrondissement of BrusselsCapital, Brussels, Belgique
Asenium Consulting
Temps plein
Gratuit avec email ou Google
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
Gratuit avec email ou Google
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
pAsenium is looking for a senior TPTRM expert to assess and manage supplier-related IT, cybersecurity, and operational risks in a large financial services environment. /ph3Responsibilities: /h3ulliConduct IT and cyber risk assessments of intragroup and external suppliers during due diligence. /liliAssess cloud services for security, data protection, and resilience; review vulnerability and penetration testing reports. /liliReview, challenge, and negotiate supplier IT and cybersecurity clauses with procurement, legal, and business teams. /liliCoordinate external on-site audits, validate findings, track remediation, and elevate critical risks. /liliMonitor supplier security posture through periodic reviews, incident responses, and compliance attestations. /liliLead ICT risk and cyber committees; prepare dashboards and concise risk reports for senior management. /liliCollaborate with cyber defense, security architecture, continuity, and data protection specialists. /liliImprove TPTRM methodologies, assessment templates, audit guidelines, and reporting standards. /li /ulh3Must-have
requirements:
/h3ulli10+ years of experience in information security and IT/cyber risk management, with strong third-party assessment and cloud security expertise. /liliExperience assessing SaaS, IaaS, and PaaS environments, application security, vulnerabilities, penetration testing, and audit findings. /liliProficiency in ISO 27001, SOC/SOC 2, NIST, and OWASP frameworks and methodologies. /liliFinancial services experience within large corporate environments. /liliExperience reviewing and amending third-party IT and cybersecurity contractual clauses. /liliStrong process design and business analysis skills, plus experience delivering stakeholder presentations and training. /liliStrong analytical, communication, negotiation, and stakeholder management skills; ability to work autonomously, manage competing priorities, and coach others. /liliMaster’s degree in IT, Cybersecurity, or Risk Management, or equivalent experience. /liliFluent French and English, spoken and written. /li /ul
requirements:
/h3ulli10+ years of experience in information security and IT/cyber risk management, with strong third-party assessment and cloud security expertise. /liliExperience assessing SaaS, IaaS, and PaaS environments, application security, vulnerabilities, penetration testing, and audit findings. /liliProficiency in ISO 27001, SOC/SOC 2, NIST, and OWASP frameworks and methodologies. /liliFinancial services experience within large corporate environments. /liliExperience reviewing and amending third-party IT and cybersecurity contractual clauses. /liliStrong process design and business analysis skills, plus experience delivering stakeholder presentations and training. /liliStrong analytical, communication, negotiation, and stakeholder management skills; ability to work autonomously, manage competing priorities, and coach others. /liliMaster’s degree in IT, Cybersecurity, or Risk Management, or equivalent experience. /liliFluent French and English, spoken and written. /li /ul