Third-Party Risk Manager
About the assignment
A leading organization is strengthening its approach to third-party risk management. You will own the security assessment, monitoring and incident response lifecycle for vendors, suppliers and critical business partners.
You'll develop and implement frameworks that identify, evaluate and continuously monitor third-party risks. Your work protects the organization from supply chain vulnerabilities, data breaches and compliance failures that originate outside the perimeter.
Your responsibilities
- Design and execute security questionnaires and vendor assessment procedures aligned with industry standards
- Evaluate third-party risk ratings using frameworks like NIST, ISO 27001 and regulatory requirements
- Monitor ongoing vendor compliance through audits, attestations and performance dashboards
- Coordinate incident response when third-party breaches or security events occur
- Maintain a centralized vendor risk register and escalate critical findings to leadership
- Develop remediation plans with vendors to close identified security gaps
- Report TPRM metrics, trends and recommendations to governance committees
Tech Stack & Tools
Platforms & Tooling
Frameworks & Standards
Cloud & Infrastructure
Methodologies
Certifications (preferred)
Must-haves
- 5+ years in vendor risk management, third-party security or supply chain risk assessment
- Expertise in security questionnaires, vendor assessment frameworks and compliance standards
- Proven experience with TPRM platforms or vendor management software
- Strong understanding of ISO 27001, SOC 2, NIST or equivalent frameworks
- Excellent stakeholder communication—able to translate risk findings for technical and non-technical audiences
Nice-to-haves
- Experience with TPRM tools like OneTrust, Whistic or SecurityScorecard
- Familiarity with supply chain attack scenarios and TIBER-EU frameworks
- CISM, CRISC or equivalent risk/compliance certification
What we offer
- Develop a strategic TPRM programme that shapes vendor security across the organization
- Work with a multidisciplinary team spanning security, compliance, procurement and legal
- Access to professional development and continuous learning in emerging third-party threats
- Competitive salary and flexible working arrangements
- Collaborate with forward-thinking security leadership committed to proactive risk management
- Personal guidance from a dedicated MVPeople consultant who knows your niche
The process
Introduction
Phone call with your MVPeople consultant (within 24 hours)
Match & Brief
We discuss the assignment in detail and prepare you
Client meeting
Introduction to the client
Start
Contracting and onboarding
Details
Type
Secondment (MVProfessionals)
Location
Den Bosch
Work model
Hybrid
Level
Medior
Industry
overige
Market indication
€55,000 - €75,000 per year
Posted
12 November 2026
Job ID
60208
Contact
MVPeople Group
cv@mvpeoplegroup.com