Senior Cyber Security Third Party Risk Manager

Location: Hybrid in Rotterdam, Netherlands; 40% office, 40% home, and 20% flexible working. With manager approval, work abroad within approved countries for up to 3 weeks per year, with a maximum of 2 consecutive weeks.

Gross annual salary: €72,000–€90,100, including FlexBudget and 8% holiday allowance.

Company

hirify.global is a sustainable energy company working toward climate neutrality by 2035 and operating critical energy infrastructure.

What you will do

• Own the end-to-end Third Party Risk Management framework, including policies, standards, procedures, risk registers, and playbooks.
• Lead governance forums, risk acceptance processes, executive dashboards, and risk-based decision-making.
• Perform and oversee supplier security assessments covering ISO 27001, SOC reports, penetration tests, BCDR plans, and security controls.
• Define supplier risk ratings, remediation requirements, exception management, continuous monitoring, and reassessments.
• Embed security review gates into procurement and support contract reviews, security clauses, audits, and regulatory examinations.
• Optimise the TPRM/GRC platform and automate vendor onboarding, risk tiering, workflows, reporting, and assessment coverage.

Requirements

• 5+ years of hands-on Third Party Risk Management experience and 7+ years in Cyber Security, IT Risk, Information Security, or GRC.
• Experience leading or significantly maturing a TPRM programme in a large enterprise.
• Strong knowledge of vendor risk assessments, risk tiering, continuous monitoring, fourth-party risk, supply chain security, and exception management.
• Knowledge of NIS2, DORA, ISO 27001, NIST CSF, and GDPR.
• Hands-on experience with a GRC/TPRM platform such as ServiceNow GRC, OneTrust, Archer, ProcessUnity, or a similar tool.
• Ability to influence senior stakeholders and collaborate across Procurement, Legal, Compliance, Risk, Data Privacy, IT, and the wider business.

Nice to have

• Experience in critical infrastructure or regulated-sector environments.
• CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor certification.
• Certified Third Party Risk Professional certification.
• Knowledge of cloud security, identity and access management, incident management, and BCDR.

Culture & Benefits

• Hybrid working with focused home-working days and collaboration at the Rotterdam headquarters.
• FlexBudget can be paid out, exchanged for additional holiday days, or saved.
• 8% holiday allowance and, depending on the role, a bonus or collective profit sharing.
• Personal and professional development support.
• Opportunity to work within the CISO Office at the intersection of energy transition and evolving cybersecurity regulation.

Hiring process

• Apply directly through the hirify.global Careers Portal; applications by email are not processed.