IT and Cyber Third Party Risk Assessor Consultant

h3Mission Overview: /h3 pThe IT and Cyber Third Party Risk Assessor role is a consultancy mission at the client site, representing Keystone Solutions. As a Keystone Solutions consultant, you will be hired to deliver expert services on client projects, focusing on robust IT and Cyber Risk Management with a strong emphasis on Third-Party Technology Risk Management. /p h3Responsibilities: /h3 ul liConduct comprehensive IT and Cyber risk assessments of third-party suppliers (intragroup and external) during the due diligence phase, evaluating their cybersecurity posture, IT controls, and compliance with regulatory and contractual obligations. /li liAssess cloud-based solutions (SaaS, HSP, AWS, etc.) with a deep focus on security, data protection, and resilience. /li liReview vulnerability and penetration testing reports, ensuring alignment with security best practices and regulatory requirements. /li liReview, challenge, and negotiate IT and cybersecurity clauses in supplier contracts, ensuring they meet risk appetite and compliance standards. /li liCollaborate with procurement, legal, and business teams to integrate risk mitigation measures into contractual agreements. /li liPilot IT and Cyber onsite audits conducted by external auditors, ensuring proper scope, execution, and alignment with TPTRM objectives. /li liReview IT audit reports, validate findings, and track remediation plans with third-party suppliers. /li liEscalate critical IT and Cyber risks and ensure timely resolution in collaboration with internal stakeholders. /li liMonitor third-party IT and Security posture through periodic reviews of security reports, incident responses, and compliance attestations (ISO 27001, SOC, NIST, etc.). /li liLead ICT Risk Cyber Committees involving internal business representatives and supplier security teams to assess ongoing risks, track mitigation progress, and enforce accountability. /li liDevelop and maintain ICT risk dashboards and synthetic reports for senior management, highlighting key risks, trends, and recommendations. /li liWork closely with Cyber Defense Teams, Security Architects, Business IT Continuity Experts, Data Protection Officers, Procurement Legal Teams to align third-party risk management with threat intelligence, technical controls, resilience, privacy regulations, and contract lifecycle management. /li liContribute to the evolution of TPTRM frameworks, tools, and methodologies, ensuring alignment with group standards, industry best practices, and regulatory changes. /li liDevelop and refine ICT risk assessment templates, audit guidelines, and reporting standards for both expert and non-expert audiences. /li /ul h3Requirements: /h3 ul liMaster degree in IT, Cybersecurity, Risk Management or equivalent by experience. /li liSecurity certifications like CISSP, CISM, CIPP, CCSK are optional. /li liFluent in French (mandatory), Dutch, and English (mandatory). /li liProfessional experience in information security (10+ years). /li liExperience in process design and business analysis. /li liExperience in third-party IT and security assessments. /li liExperience in IT risk management. /li liExperience in delivering presentations and training. /li li10+ years of professional experience in IT Cyber Risk Management, with a strong focus on third-party risk assessments and cloud security (SaaS, IaaS, PaaS). /li liExperience with application security, vulnerability management, penetration testing, and audit methodologies (ISO 27001, SOC 2, NIST, OWASP). /li liKnowledge of control frameworks and audit methodologies. /li liFamiliarity with GRC tools (ServiceNow). /li liProficiency in Information Security and Risk Management frameworks (e.g., ISO 27001, SOC, NIST, OWASP). /li liProfessional experience in Financial Services, particularly in large corporate environments. /li liExperience in reviewing and amending IT and Cyber Third-Party clauses in contracts. /li liProcess design and business analysis, particularly in IT and security risk management. /li liDelivery of presentations and training to stakeholders on risk-related topics. /li liStrong IT background, with exposure to operational and security risk management. /li liStrong analytical and synthesis skills – ability to distill complex technical risks into clear, actionable insights for management. /li liExcellent communication and influencing skills – capable of engaging with technical experts, business stakeholders, and external suppliers. /li liAutonomous, proactive, and results-driven with a structured and methodical approach. /li liAbility to manage multiple priorities in a dynamic, multicultural environment. /li liNegotiation and conflict-resolution skills for contractual and risk mitigation discussions. /li liAbility to capture and adapt to stakeholder expectations while respecting processes in place. /li liAbility to mentor/coach people. /li /ul h3Consultancy Advantages at Keystone Solutions: /h3 ul liAs a consultant, you will work on-site at