We are looking for an experienced Senior Information Security / GRC Consultant to join an exciting assignment within a large international organization.

In this role, you will play a key part in strengthening information security governance, improving third-party risk management processes, and ensuring that suppliers meet established security and compliance requirements.

The ideal candidate is a senior, hands-on professional who can independently drive initiatives, implement effective processes and tools, and collaborate with stakeholders across the organization.

Key Responsibilities

• Implement and improve tools for managing supplier-related information security risks.

• Conduct and coordinate information security assessments of new and existing suppliers.

• Develop and enhance Third Party Risk Management (TPRM) processes and frameworks.

• Ensure appropriate information security requirements are incorporated into supplier contracts and procurement processes.

• Review supplier agreements, security appendices, and contractual compliance requirements.

• Perform supplier risk assessments, identify security gaps, and recommend mitigation actions.

• Support information security governance, risk management, and compliance (GRC) activities.

• Collaborate with procurement, legal, IT, security, and business stakeholders.

• Establish structured documentation, procedures, and reporting mechanisms.

• Ensure effective knowledge transfer and handover at the end of the assignment.

Required Qualifications

• Extensive professional experience in Information Security, Governance, Risk & Compliance (GRC).

• Strong expertise in Third Party Risk Management (TPRM) and supplier security assessments.

• Solid understanding of ISO 27001, ISO 27002, and established information security frameworks.

• Proven experience conducting information security risk assessments and supplier audits.

• Experience defining and reviewing information security requirements in supplier contracts and procurement agreements.

• Ability to independently implement and improve information security processes, frameworks, and tools.

• Strong stakeholder management, communication, and documentation skills.

• Experience working in complex, cross-functional organizational environments.

Preferred Qualifications

• Knowledge of NIS2 and relevant European cybersecurity regulations.

• Previous experience as an Information Security Manager, GRC Consultant, or Third Party Risk Manager.

• Experience implementing supplier risk management or GRC platforms.

• Background working with large international organizations.

• Experience delivering interim consulting assignments and managing organizational change.

Who You Are

You are a structured, proactive, and solution-oriented information security professional who combines strategic understanding with hands-on execution.

You are comfortable working independently, managing multiple stakeholders, and translating complex security and compliance requirements into practical, sustainable processes.

Please note: This is primarily a governance, risk, and compliance-focused position, rather than a technical cybersecurity engineering role.

Why Join Us?

• Opportunity to contribute to a high-impact information security initiative.

• Work within a dynamic international business environment.

• Take ownership of supplier risk management improvements.

• Collaborate with experienced professionals across security, procurement, and compliance functions.

• Flexible consulting assignment with opportunities for professional development.