Third Party Risk Management Expert

Inetum

. Support the implementation and continuous improvement of the TPRM operating model .

Posted 10/21/2026full-timeRemote • PortugalMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Third Party Risk Management (TPRM) and cybersecurity risk assessments, with a strong focus on supplier risk evaluations and compliance with ISO/IEC 27001 and SOC 2 standards. Capable of managing supplier assessments and reporting through key performance indicators (KPIs) and key risk indicators (KRIs).

Highest-signal resume keywords

Third Party Risk Management (TPRM)Cybersecurity Risk AssessmentISO/IEC 27001 KnowledgeSOC 2 KnowledgeStakeholder Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity RiskIT AuditSecurity AssuranceSupplier Risk AssessmentSecurity Controls

Soft Skills

Analytical SkillsCommunication SkillsReporting Skills

Industry Keywords

GRCRisk ReportingControl GapsRemediation ActionsKPIKRI

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support the implementation and continuous improvement of the TPRM operating model
Perform cybersecurity risk assessments of new and existing suppliers
Review security questionnaires and evidence, including ISO/IEC 27001 certificates, SOC 2 reports, penetration test summaries, and security policies
Identify control gaps and define remediation actions, compensating controls, and risk escalation requirements
Manage supplier assessments from onboarding and inherent risk screening through remediation, reassessment, and offboarding
Coordinate cybersecurity questionnaire responses for customers and partners
Maintain auditable records and support risk reporting through KPIs and KRIs
Work closely with GRC, Cybersecurity, Procurement, Legal, Business Owners, and suppliers
Identify opportunities to automate and streamline the TPRM lifecycle
Support knowledge transfer to the internal GRC team

Requirements

What you’ll need

Experience in TPRM, cybersecurity risk, IT audit, security assurance, or GRC
Knowledge of supplier risk assessments
Knowledge of security controls
Knowledge of ISO/IEC 27001
Knowledge of SOC 2
Strong analytical skills
Strong communication skills
Strong stakeholder management skills
Strong reporting skills

Benefits

Comp & perks

Employees can work remotely