Cybersecurity Risk Expert / TPRM

Project overview

TPRM Lead – Third-Party Risk Management

The TPRM Lead is responsible for:

• Collaborating with the manager to establish a supplier security assurance framework.
• Ensuring this framework aligns with procurement and supplier due diligence processes.
• Assessing and prioritizing supplier information security risks based on their criticality and business impact.
• Collaborating with various stakeholders to understand and define the supplier risk management strategy and requirements.
• Developing security requirements from the company's information security repository for inclusion in supplier contract addenda.
• Developing an assessment model to analyze and review new suppliers, in collaboration with security risk assessment teams.
• Performing initial assessments and due diligence regarding suppliers' logical and physical security controls.
• Validating the results of supplier security assessments and alerting stakeholders and procurement teams to identified risks.
• Supporting the onboarding process for new suppliers.
• Conducting regular checks on supplier compliance with contractual requirements and monitoring their performance and SLAs.
• Assessing and scoring supplier compliance levels, and proposing recommendations to address any gaps.
• Presenting reports on supplier risks and performance to stakeholders through KPIs and dashboards.
• Verifying that suppliers fulfill all their contractual obligations before their collaboration ends.
• Participating in the negotiation of security clauses to be included in supplier contracts.

Project details

• Start: flexible
• Location: Rabat, Morocco, MA
• Languages: French