Security Governance Controls and Third Party Security Specialist

Skills

About the Role

You will develop and maintain security policies, standards, guidelines, and governance frameworks. You will monitor controls and KPIs, assess third-party security, perform gap analyses, support audits and regulatory reviews, track remediation, and report on security posture and governance metrics.

Requirements

• Experience in security governance, information security, cyber risk management, third-party security, or related areas
• Knowledge of security frameworks, controls, risk-management methodologies, and governance processes
• Ability to translate regulatory and business requirements into security initiatives
• Experience with cross-functional stakeholders in regulated environments
• Communication and presentation skills
• Ability to manage multiple priorities and coordinate across teams
• Written and spoken English
• Familiarity with DORA, NIS2, EBA Guidelines, ISO 27001, or NIST is desirable
• Knowledge of audit, compliance, data protection, and operational risk processes is desirable
• CISSP, CISM, CRISC, or ISO 27001 certification is desirable
• Security portfolio management, controls monitoring, or security assurance experience is desirable

Responsibilities

• Define and maintain security policies, standards, guidelines, and governance frameworks
• Coordinate and monitor security controls, KPIs, and governance processes
• Manage third-party security assessments, contractual requirements, and exceptions
• Perform security posture assessments, maturity evaluations, and gap analyses
• Support regulatory inspections, audits, consultations, and supervisory requests
• Monitor remediation of audit findings, regulatory observations, and security assessments
• Provide security-posture, control-effectiveness, and governance reporting
• Develop security standards, models, architectures, baselines, and guidelines

Benefits

• Flexible working hours
• Hybrid working