SNI is serving as a trusted IT Outsourcing partner in line with the needs of World's most prestigious firms and carried out successful projects worldwide.

Responsibilities:

Third-Party Risk Assessments: Conduct end-to-end security risk assessments for suppliers, SaaS, cloud services, and OT solutions by evaluating technical documentation, SOC 2/ISO reports, and security evidence.
Risk Advisory & Governance: Advise cross-functional teams (Procurement, Legal, Compliance) on vendor risks during onboarding and lifecycle management to align with internal security policies.
Remediation & Stakeholder Engagement: Drive direct discussions with suppliers to clarify security posture, address non-compliance, and define actionable risk-remediation plans.
TPRM Process Optimization: Continuously improve TPRM frameworks, methodologies, and workflows in alignment with emerging cyber threats and regulatory requirements.

Skills:

TPRM & Security Expertise: 5+ years in cybersecurity/IT risk management, with 3+ years dedicated to third-party security assessments and vendor risk evaluations.
Frameworks & Regulations: Practical knowledge of ISO 27001, NIST CSF, SOC 2, CIS Controls, NIS2, DORA, and the EU AI Act.
Risk Analysis & Communication: Strong ability to analyze technical documentation, translate risks into actionable decisions, and communicate effectively in English.
Certifications (Bonus): CISSP, CRISC, CISM, SSCP, or ISO 27001 Lead Auditor/Implementer.

Research Scientist, Kaggle

Research Scientist, Kaggle

IT Security & Risk Officer

Więcej ofert w kategorii Cyberbezpieczeństwo

PKI Certificate Engineer

Database Security Analyst / Cyber Security Analyst

Security Risk Management Specialist

Praktyki - Cyber Security (ścieżka konsultingowa)

Senior CMP / M2M Consultant – Security & ENS Certification