Cyber Risk Assessment Consultant – Vendor Management

PRIORITY

. Conduct Information Security Risk Assessments (ISRA), identifying threats, vulnerabilities, and potential business impacts.

Posted 11/11/2026full-timeAthens • GreeceMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting Information Security Risk Assessments and compliance with regulatory requirements, including DORA, NIS2, and GDPR. Proficient in assessing security controls against ISO/IEC standards and managing third-party risk in the financial sector.

Highest-signal resume keywords

Information Security Risk ManagementISO/IEC 27001 ComplianceNIST Cybersecurity FrameworkVendor Risk AssessmentsRegulatory Compliance (DORA, NIS2, GDPR)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security Risk AssessmentRisk Management MethodologiesIT AuditCybersecurity GRCCloud SecurityNetwork SecurityIdentity and Access Management (IAM)Risk Register MaintenanceAnalytical ReportingStakeholder Management

Soft Skills

Analytical SkillsReporting SkillsStakeholder Management Skills

Certifications & Qualifications

ISO 27001 Lead AuditorISO 27001 Lead ImplementerCISACRISCCTPRP

Industry Keywords

BankingFinancial ServicesConsultingDORANIS2GDPREBA GuidelinesISO/IEC 27002ISO/IEC 27005NIST SP 800-30

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Conduct Information Security Risk Assessments (ISRA), identifying threats, vulnerabilities, and potential business impacts.
Assess information security controls against ISO/IEC 27001, ISO/IEC 27002, and NIST CSF.
Perform third-party and vendor security risk assessments, including due diligence and periodic reviews.
Support compliance with regulatory requirements, including DORA, NIS2, GDPR, and relevant EBA guidelines.
Review security questionnaires, certifications, audit reports, and supporting documentation.
Maintain risk registers and support ICT third-party risk management activities.
Identify security gaps, recommend mitigation measures, and monitor remediation activities.
Collaborate with IT teams, business stakeholders, and external service providers.
Prepare risk assessment reports and present findings and recommendations.

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Security, IT, or a related field.
3–5 years of experience in Information Security Risk Management, IT Risk, IT Audit, Cybersecurity GRC, or Third-Party Risk Management.
Knowledge of ISO/IEC 27001, NIST CSF, and information security risk assessment methodologies.
Familiarity with DORA, NIS2, GDPR, and relevant financial sector regulations.
Understanding of IT infrastructure, cloud security, network security, and IAM.
Strong analytical, reporting, and stakeholder management skills.
Excellent command of Greek and English.
Previous experience in banking, financial services, or consulting.
Experience in vendor risk assessments and ICT third-party risk management.
Familiarity with ISO/IEC 27005 and NIST SP 800-30.
Certifications such as ISO 27001 Lead Auditor/Implementer, CISA, CRISC, or CTPRP.

Benefits

Comp & perks

Opportunity to contribute to cybersecurity and regulatory compliance projects within the banking sector.
Exposure to complex financial services environments and evolving regulatory frameworks.
Collaboration with experienced cybersecurity professionals.
Hybrid working model in Athens.
12-month contract with potential for renewal.