Third Party Risk Management Consultant (h/f)

emagine is seeking an experienced Third Party Risk Management Consultant to lead the transition of cyber risk processes to an in-house model. This role is pivotal in supporting NIS 2 compliance and requires a professional capable of managing complex stakeholder relationships within a global environment.

Key responsibilities

• Finalize, roll out, and manage the day-to-day operations of the Third Party Risk Management (TPRM) process.
• Distribute security questionnaires to suppliers and conduct thorough reviews of submitted evidence.
• Identify, document, and track risks and gaps, while overseeing remediation plans and exception management.
• Act as the primary point of contact for cybersecurity questionnaires received from customers.
• Collaborate closely with internal departments, including procurement, to ensure alignment on supply-chain security expectations.

Requirements

• Extensive background in risk management with an internal audit-oriented approach.
• Strong expertise in cybersecurity and information security, preferably supported by ISO 27001 certification.
• Proven experience in evaluating supplier documentation and managing remediation workflows.
• Deep understanding of NIS 2 regulations and supply-chain cybersecurity standards.
• Excellent communication skills in English, with the ability to manage diverse internal and external stakeholders.

What we offer

• A hands-on position with the autonomy to shape and own critical risk management processes.
• Direct involvement in high-impact business initiatives within a collaborative and supportive team.
• Opportunity to work in a fully remote environment with a focus on professional growth and ownership.