Cybersecurity Supplier Assessor

About the role

We are seeking a cybersecurity professional to protect our organization’s cyber posture by assessing and managing risks associated with supplier engagements. The Cybersecurity Supplier Assessor will evaluate the security controls of new and existing third‑party partners and provide recommendations that shape business decisions and enhance the overall security landscape.

Key responsibilities

• Conduct detailed assessments of third‑party cybersecurity practices and controls.
• Analyze assessment findings to identify risks, gaps, and improvement opportunities.
• Collaborate with procurement, legal, and other stakeholders to develop and implement remediation plans.
• Interpret and negotiate cybersecurity clauses within supplier contracts.
• Stay current on emerging threats and continuously refine assessment methodologies.
• Benchmark third‑party risk management services and tools against industry standards.

Required profile

• University degree in Computer Science, Data Science, IT, Law or a related field.
• Fluency in English.
• 3‑5 years of experience as an Information Security auditor or in supplier risk assessments.
• Strong analytical abilities and a keen eye for detail.
• Excellent communication skills, capable of interacting with all organizational levels, including executives.
• Willingness to travel internationally (minimum 10% of the time).
• Relevant certifications (e.g., CRISC, CISA, CCSK, CCAK, CSX‑Practitioner, ISO 27001 Lead Auditor, PMP) are a plus.

Required skills

• ISO 27001
• NIST framework
• COBIT
• Information security risk assessment methodologies
• Cybersecurity frameworks and principles
• Secure coding practices
• Supplier/third‑party assessment processes