Risk Management Lead - Third Party

What you'll be working on

You'll lead efforts to identify and manage cybersecurity risks from third-party vendors, ensuring compliance, resilience, and secure onboarding. This includes conducting risk assessments, reviewing supplier controls, and collaborating across teams to protect the organisation’s digital supply chain.

Who you'll be working for

You'll be working within a public sector organisation, supporting national infrastructure and digital resilience across Ireland.

What you'll need to succeed

To succeed in this role, you'll need :

• 5+ years in third-party risk management, cybersecurity, IT risk, or compliance.
• Strong understanding of cybersecurity frameworks (e.g., ISO 27001, NIST, SOC 2, PCI DSS).
• Experience conducting in-depth vendor risk assessments and due diligence.
• Familiarity with AI, OT, IoT, and ML risk considerations.
• Proficiency in using risk assessment tools and workflow automation platforms.
• Strong analytical and problem-solving skills.
• Ability to interpret and assess technical security documentation (e.g., pen test reports, vulnerability scans).
• Excellent communication and stakeholder engagement skills.
• Experience working cross-functionally with procurement, legal, IT, and business units.
• Knowledge of data protection regulations (e.g., GDPR).
• Relevant certifications (e.g., CISM, CISA, CISSP, CRISC) are a plus.

What you'll get in return