TL;DR

Vendor Security Risk Analyst (Fintech): Governing and managing the security aspects of IT vendor relationships and executing risk assessments with an accent on ensuring information security risks are managed effectively across all stages of vendor relationships. Focus on translating complex technical risks into clear business contexts and collaborating with various internal and external stakeholders to address security challenges.

Location: Amsterdam

Salary: Negotiable EUR / Year

Company

Since 2000 %hirify_global% provides professional solutions to organizations ranging from tech start-ups to global players.

What you will do

Govern and manage IT vendor relationships concerning performance on the security aspects of underlying contractual obligations.
Execute Vendor Security Risk Assessments and perform necessary follow-up actions, focusing on material risks.
Ensure that information security risks are identified and managed effectively throughout all stages of the relationship with external vendors.
Review the applicability and quality level of assurance reports issued by third parties.
Manage the IT security-related part of vendor contracts, working closely with 2nd line functions such as legal, compliance, and procurement on contractual changes.
Actively stay up-to-date with emerging cyber security trends, risk, and threat developments, and share this knowledge to help integrate them into the assessment program.

Requirements

Knowledge and experience with setting up projects & deliverables within supply chain security / Third-Party Risk Management (TPRM).
Proven experience in executing information security risk assessments.
Knowledgeable on one or more areas such as security processes, technology architectures, network security, application security, and vulnerability management.
Experience with the ServiceNow TPRM module is a significant advantage.
HBO or University degree.
Excellent stakeholder management skills.

Culture & Benefits

Hands-on, self-organised, willing to finish and deliver (execution power).
Service-oriented professional who enjoys taking on an internal consultancy role.
The working language within the team is English.