TL;DR

Vendor Security Risk Analyst (Supply Chain Security): Governing and managing IT vendor security aspects and executing risk assessments with an accent on continuous improvements in vendor reporting and service quality, effective information security risk management, and overall excellence of the Supply Chain Security service. Focus on translating complex technical risks into clear business contexts, collaborating with stakeholders, and integrating emerging cyber security trends into assessment programs.

Location: Onsite in Amsterdam, North Holland

Company

%hirify_global% connects skilled professionals with projects for organizations ranging from tech start-ups to global players, providing professional solutions since 2000.

What you will do

Govern and manage IT vendor relationships concerning security aspects of contractual obligations.
Execute Vendor Security Risk Assessments and perform necessary follow-up actions.
Ensure information security risks are identified and managed effectively throughout all stages of external vendor relationships.
Review the applicability and quality level of assurance reports issued by third parties.
Manage the IT security-related part of vendor contracts, collaborating with legal, compliance, and procurement.
Actively stay up-to-date with emerging cyber security trends, risks, and threat developments, integrating knowledge into the assessment program.

Requirements

Knowledge and experience with setting up projects and deliverables within supply chain security / Third-Party Risk Management (TPRM).
Proven experience in executing information security risk assessments.
Knowledgeable in one or more areas such as security processes, technology architectures, network security, application security, and vulnerability management.
HBO or University degree required.
Excellent stakeholder management skills and ability to translate technical risks into business risks.
English: B2 required for team communication.

Nice to have

Experience with the ServiceNow TPRM module.

Culture & Benefits

Join a diverse and expanding team within the Cyber Defense grid for a major financial services client.
Contribute to improving the excellence of Supply Chain Security services.
Work according to DevOps & Agile methodology, improving services based on user stories.
Opportunity to help solve security-related questions and signal improvements.
Engage frequently with various stakeholders, including other IT departments, business colleagues, and software suppliers.