Senior Third-Party Risk Management Consultant - 2-Year Engagement

MENA Consultant · Worldwide · Full-time · Remote

Location: remote.
Years of Experience: 8-10 years.
Project Duration: 2 years.
Language Requirements: Fluency in Arabic & English (written and spoken).

We are seeking a Senior Third-Party Risk Management Consultant to assess and manage risks across the full vendor lifecycle, from onboarding and due diligence through ongoing monitoring and offboarding. The consultant will evaluate third-party cybersecurity, technology, operational, privacy, compliance, and resilience risks; track findings and remediation; and help strengthen TPRM frameworks and reporting. The role involves working closely with procurement, legal, cybersecurity, compliance, and business teams to support informed vendor decisions.
Key Requirements

• Strong experience in third-party risk management (TPRM), including vendor due diligence, inherent and residual risk assessments, and risk-based reviews throughout the vendor lifecycle.

• Experience assessing cybersecurity, technology, operational, compliance, privacy, and business continuity risks associated with third parties.

• Ability to evaluate vendor security controls using assessment responses, supporting evidence, audit reports, certifications, and independent assurance reports.

• Experience managing vendor risk registers, findings, remediation plans, risk acceptance, and exceptions.

• Knowledge of risks associated with cloud services, SaaS platforms, managed services, and other technology providers, including concentration and fourth-party risk.

• Experience assessing third-party business continuity, disaster recovery, and operational resilience capabilities.

• Familiarity with contractual risk requirements, including security clauses, SLAs, data protection obligations, audit rights, and incident notification.

• Experience developing or improving TPRM frameworks, procedures, assessment methodologies, and reporting.

• Knowledge of applicable NCA controls, privacy requirements, cybersecurity standards, and vendor risk regulations.

Key R

Open the full listing & Apply on Easy Job ↗