Third Party Risk Management Consultant (h/f)

Are you an experienced Risk Management professional with solid cybersecurity knowledge of ISO 27001? emagine has an opportunity for you to drive the move of a third-party cyber risk process from an external provider to an in-house model, supporting NIS 2 compliance, with a global team. Skills & Experience Senior risk management background, with an internal audit style approach Solid cybersecurity and information security knowledge, ideally with an ISO 27001-type certification Experience reviewing supplier questionnaires and evidence, and documenting risks and gaps Experience following up on remediation plans and exceptions Strong communicator, comfortable managing many internal and external stakeholders: procurement, suppliers… Working knowledge of NIS 2 and supply-chain cybersecurity expectations Fully fluent in written and spoken English Nice to have: familiarity with NIST CSF and SOC 2, and with TPRM or GRC tooling Tasks & Deliverables Finalise and roll out the TPRM process, then run it day to day Send questionnaires to suppliers and review answers and evidence Document risks and gaps, and follow up on remediation and exceptions Respond to cybersecurity questionnaires received from customers Own the topic and work with stakeholders across the business, including procurement Why this role? A hands-on role where you shape the process and run it Real ownership of a topic with visible business impact Collaborative, enabling team that values autonomous, self-starting professionals 6-month contract, with a possible extension or conversion to permanent Other details Location: Portugal, Lisbon ideal to spend 2 days per week in office Spain and fully remote in Europe possible Start: ASAP Duration: 6 months, possible extension expected rate €300 - 400 per day Apply with your latest CV or reach out to Brendan to find out more.