Senior Third-Party Risk Specialist

Highlights

• Build and own third-party risk program safeguarding AI assets and data.
• Lead vendor assessments, audits and incident follow-up to resolution.
• Partner with Legal, Security and Procurement on vendor resilience.

What they offer

• healthcare coverage
• parental leave
• retirement plans
• relocation support
• wellness programs
• meal and transportation allowances

Ideal candidate

Experienced risk and compliance professional who thrives collaborating across legal, security and operations to safeguard partnerships and build resilient processes.

Requirements

• 7+ years in third-party risk management, cybersecurity compliance, information security governance, or a related field
• Experience supporting cybersecurity compliance programs, certification processes, or external audits
• Practical knowledge of standards and frameworks such as ISO 27001, SOC 2, NIST SP 800-53, or regulations like NIS2, DORA, GDPR
• Proficiency in risk assessment methodologies (e.g., EBIOS RM, ISO 27005)
• Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA
• Strong organizational skills and attention to detail, with ability to manage documentation and coordinate stakeholders
• Excellent written and verbal communication skills
• Strong analytical and problem-solving abilities
• Ability to work collaboratively across technical, legal, commercial, and operational teams
• Professional proficiency in English; French proficiency is a plus