Vendor Security Risk Analyst / Supply Chain Security Specialist

TL;DR

Vendor Security Risk Analyst / Supply Chain Security Specialist: Governing and managing security aspects of IT vendor relationships and executing risk assessments with an accent on translating complex technical risks into clear business contexts and driving DORA impact. Focus on managing IT security-related vendor contracts, integrating emerging cyber security trends into assessment programs, and ensuring effective risk management across all vendor stages.

Location: Amsterdam, North Holland

Company

hirify.global provides professional solutions to organizations ranging from tech start-ups to global players, connecting skilled professionals with projects from offices in Amsterdam and London since 2000.

What you will do

• Govern IT vendor relationships concerning security aspects of contractual obligations.
• Execute Vendor Security Risk Assessments and perform necessary follow-up actions on material risks.
• Ensure information security risks are identified and managed effectively throughout all stages of external vendor relationships.
• Review the applicability and quality of assurance reports issued by third parties.
• Manage the IT security-related part of vendor contracts, collaborating with legal, compliance, and procurement.
• Stay up-to-date with emerging cyber security trends, risks, and threat developments and integrate this knowledge into the assessment program.

Requirements

• Knowledge and experience with setting up projects and deliverables within supply chain security / Third-Party Risk Management (TPRM).
• Proven experience in executing information security risk assessments.
• Knowledgeable on one or more areas such as security processes, technology architectures, network security, application security, and vulnerability management.
• HBO or University degree.
• Excellent stakeholder management skills and a strong ability to translate technical risks into business risks.
• The working language within the team is English.

Nice to have

• Experience with the ServiceNow TPRM module.