Third Party Risk Specialist

Third-Party Risk & Compliance Specialist
Location: Cork (1 day per week onsite)
Job Type: 6-Month Contract

Our client, a leading Cybersecurity organization, is hiring an experienced Third-Party Risk & Compliance Specialist to join the team in Cork on a six-month contract. The successful candidate will support a critical operational resilience programme, driving supplier resilience, regulatory compliance and third-party risk remediation initiatives

Responsibilities

• Lead supplier exit strategy testing and oversee remediation activities to strengthen operational resilience.

• Perform third-party risk assessments, supplier onboarding reviews and ongoing risk reassessments.

• Drive supplier accountability by identifying risks and ensuring timely resolution of remediation actions.

• Support DORA compliance initiatives, including maintaining the Register of Information, reviewing supplier contracts and preparing governance reports.

• Collaborate with Information Security, Procurement, Legal and business teams to manage third-party risk and compliance.

• Assess compliance gaps and implement effective risk mitigation and remediation strategies.

• Contribute to the continuous improvement of third-party risk management and operational resilience frameworks.

Skillset

• At least 3 years’ experience in Information Security, Operational Resilience, Third-Party Risk Management or GRC.

• Proven experience managing supplier risk, third-party assessments and operational resilience activities.

• Strong understanding of ISO 27001 and other security or compliance frameworks.

• Excellent stakeholder engagement and communication skills, with the ability to influence and challenge suppliers effectively.

• Demonstrated ability to drive remediation activities and manage risk mitigation initiatives.

• Experience operating independently within regulated or highly controlled environments.

• Exposure to DORA or similar regulatory requirements is highly desirable.

• Previous experience within financial services or another regulated industry is preferred.

• Relevant certifications such as CISM, CRISC, CISSP, or ISO 27001 Lead Implementer/Auditor are advantageous.