Third Party Risk Manager (ISO/GRC)
This assignment has been successfully filled.
Browse our open vacancies, or get in touch if your organisation is looking for a similar specialist.
About the assignment
You oversee the full third-party risk management lifecycle for a growing organisation. You evaluate vendor security controls, conduct risk assessments, and ensure compliance with regulations like ISO 27001 and NIS2.
You work cross-functionally with procurement, IT, and business units to integrate security into vendor relationships. Your role balances risk mitigation with business agility—identifying critical gaps without creating unnecessary friction.
You'll build and maintain a vendor risk dashboard, track remediation efforts, and report to senior management on exposure trends.
Your responsibilities
- Assess third-party security posture using standardised questionnaires, audits, and risk scoring models
- Develop and maintain TPRM policies, procedures, and vendor risk classification frameworks
- Monitor vendor compliance with contractual security obligations and incident reporting requirements
- Conduct risk reviews during onboarding, renewal, and whenever material changes occur
- Manage vendor incidents and breaches—track impact, coordinate response, and document lessons learned
- Report third-party risk metrics and trends to executive stakeholders and the board
- Collaborate with procurement and legal to embed security requirements into vendor contracts
- Maintain a central vendor risk register and provide real-time visibility across the organisation
Tech Stack & Tools
Platforms & Tooling
Frameworks & Standards
Methodologies
Certifications (preferred)
Must-haves
- 3+ years managing third-party or supplier risk in a GRC or security role
- Strong knowledge of ISO 27001, NIS2, or equivalent compliance frameworks
- Experience with TPRM platforms (OneTrust, Archer, or ServiceNow GRC)
- Excellent communication skills—able to translate risk into business language
- Proven ability to work independently and manage competing priorities
Nice-to-haves
- CISM, CRISC, or CISA certification
- Experience in regulated industries (finance, healthcare, energy)
- Familiarity with vendor risk scoring methodologies and threat intelligence integration
- Track record of automating TPRM workflows or improving efficiency
What we offer
- Influence over enterprise security strategy and vendor governance
- Work with cross-functional teams across procurement, IT, and business units
- Access to leading TPRM tools and continuous learning resources
- Flexible work arrangements and focus on work-life balance
- Exposure to breach response and incident investigations
- Personal guidance from a dedicated MVPeople consultant who knows your niche
The process
Introduction
Phone call with your MVPeople consultant (within 24 hours)
Match & Brief
We discuss the assignment in detail and prepare you
Client meeting
Introduction to the client
Start
Contracting and onboarding
Details
Type
Freelance / ZZP (MVPeople)
Location
Amsterdam
Work model
Hybrid
Level
Medior
Industry
overige
Posted
17 June 2026
Job ID
55447
Contact
MVPeople Group
jobs@mvpeoplegroup.comLooking for a similar specialist?
We successfully filled this assignment. Is your organisation looking for a comparable profile? MVPeople introduces the first available specialists within 24 hours for interim, within 72 hours for permanent roles.
Contact us