Third Party Security Assessment – Senior Risk Consultant

Project overview

What you will be doing:

The risk consultant is a key role in the QA and Consultancy Team and will report directly to the Global Head of QA and Consultancy TPSA. The role holder will be responsible for execution of the end-to-end consultancy service to inform, guide and assess Cyber risk exposures in the selection and onboarding of critical suppliers.

This includes, but not limited to:

What you will bring to the role:

We offer a full-time employment contract

• Green field opportunity, working with our transformation programme to define and shape a developing approach for Cyber risk consultancy integrating into the end-to-end procurement process from supplier selection to completed onboarding and issue remediation on critical control gaps.
• Acting as a pioneer to prove the developing approach you will engage with other Cyber teams, Third Party Management, and other risk teams to deliver Cyber risk support at a global level.
• Provide excellent SME guidance to critical and complex projects where suppliers are involved;
• Act as a highly skilled SME and help to inform wider embedding and training on the consultancy approach to peer TPSA anaylsts to build and develop the team.
• Support Control Officers, Risk Stewards, Internal and External Audit, and Regulators with any relevant reviews, examinations and information requests.
• Conducting Quality Assurance to ensure high quality delivery of the TPSA assessment outcome;
• Collaborate with both Cybersecurity, the role-holder will be expected to contribute to, and to lead the delivery of the TPSA consultancy strategy.
• More than 5 years of experience in Cyber Security related role;
• Knowledge and exposure of Risk and Control Management frameworks and control design and execution, in theory and practice.
• Ability to understand and articulating defects, threats and technical gaps to both technical and business stakeholders.
• Bachelor Degree and/or similar experience, preferably in IT security in the Financial Services industry or global corporate service provider
• Have one or more industry-recognised cybersecurity-related certifications including CISSP, CISA, CISM, CRISC and CCSP etc.
• A demonstrable technical understanding in Cloud Security (particularly for SaaS) and AI is desired.
• Experience in third party / supply chain governance.
• Experience of working in international and diverse environments.
• Experience in engaging with third parties, business, regional and regulator stakeholders.
• Location: Kraków (hybrid, 6 office visits/month).
• Stable and long-term cooperation
• Well-defined career path at the European leader in engineering & IT consulting
• Opportunity to relocate and work in different ALTEN Polska branches
• After completion of the project, opportunity to engage in a subsequent one within the company
• Introduction and cooperation with dedicated Competences Manager

Project details

• Start: flexible
• Remote: hybrid
• Location: Kraków, Lubicz, PL
• Languages: English

Source notes

We also guarantee:

We also offer cooperation based on a B2B or Contract of mandate (UZ).

Do not hesitate and join us!

NOTICE: We kindly inform you that we will contact the selected people.

• Medicover medical care
• Medicover dental care
• Medicover Benefits platform
• Medicover Sport card
• Referral Program
• Layette for a newborn employee’s child
• Group life insurance
• Pension scheme
• Access to professional certifications with our technology partners (e.g. Google, ISTQB)
• Access to relevant industry events
• Access to the Knowledge Sharing Program
• Access to Referral program