Third Party Cyber Security Risk Expert

Location

Germany

Posted

7 days ago

Salary

0

Seniority

Mid Level

No structured requirement data.

Job Description

Third Party Cyber Security Risk Expert

TempSearch GmbH

Role Description Für unseren Kunden suchen wir einen Third Party Cyber Security Risk Expert (d/m/w/x). In dieser Position bist du maßgeblich an der Weiterentwicklung und Umsetzung des Third Party Cyber Risk Managements beteiligt. Du begleitest den gesamten Prozess von der Risikoanalyse bis zur Implementierung geeigneter Maßnahmen und fungierst als zentraler Ansprechpartner für alle Themen rund um Cyber Security Risiken bei externen Partnern und Lieferanten. - Weiterentwicklung und Umsetzung von Third Party Cyber Risk Management Strategien - Durchführung von Risikoanalysen sowie Entwicklung geeigneter Sicherheitsmaßnahmen - Planung, Steuerung und Begleitung von Cyber Security Assessments - Eigenständige Durchführung von Audits und Sicherheitsbewertungen im Lieferantenumfeld - Analyse und Bewertung von Cyber Security Risiken entlang der Lieferkette - Beratung interner und externer Stakeholder zu Cyber Security Fragestellungen - Unterstützung bei der Implementierung und Optimierung von Risikomanagementprozessen - Funktion als zentraler Experte im Third Party Cyber Risk Management Prozess Qualifications - Abgeschlossenes Studium der Informatik, Wirtschaftsinformatik, Medieninformatik oder eine vergleichbare Qualifikation - Mehrjährige Berufserfahrung im Cyber Security Risk Management - Erfahrung im Bereich Third Party Cyber Security Risk Management - Kenntnisse in Cyber Security Architektur, Assessments und Audits - Erfahrung in der Leitung und Durchführung von Cyber Security Projekten - Erfahrung mit Online-Assessments zur Bewertung der Cybersicherheit von Lieferanten - Analytische und strukturierte Arbeitsweise - Fähigkeit, komplexe Sachverhalte verständlich zu präsentieren und zu vermitteln - Sehr gute Deutsch- und Englischkenntnisse in Wort und Schrift Benefits - 100 % Remote-Arbeit möglich - Spannende Projekte im internationalen Cyber-Security-Umfeld - Hohe Eigenverantwortung und Gestaltungsspielraum - Mitarbeit in einem erfahrenen und interdisziplinären Expertenteam - Moderne Arbeitsweisen und innovative Sicherheitsprojekte - Flache Hierarchien und wertschätzende Unternehmenskultur - Langfristiger Projekteinsatz vom 15.07.2026 bis 14.01.2028 - Vollzeitposition mit attraktiven Entwicklungsmöglichkeiten - Möglichkeit, aktiv an der Weiterentwicklung moderner Cyber-Security-Strategien mitzuwirken

Related Categories

Related Job Pages

More Security Engineer Jobs

International SOS logo

Security Director

International SOS

International SOS is the world's leading health and security risk services company. Worldwide Reach, Human Touch.

Full TimeRemoteTeam 10,001+Since 1985H1B Sponsor

• Act as Security Partner in US Northeast to support the Account Management and Business Development teams • Win significant new logos and strengthen current partnerships • Elevate Workforce Resilience programs and security consulting solutions • Coordinate with Business Development Managers and Account Managers • Act as subject matter expert during complex new business opportunities • Provide input to Security Consulting and Managed Services solution design • Develop and Drive Consulting & Solutions Growth • Collaborate on solution design • Actively participate and contribute to the distribution strategy • Advocate for US Northeast clients and provide local market insight

New Jersey + 1 moreAll locations: New Jersey | New York
Numeris logo

Information Security Engineer – Cloud Security Engineer

Numeris

Canada's most trusted and authoritative source for broadcast measurement and consumer behavior data.

ContractRemoteTeam 201-500H1B No Sponsor

• Multi-Cloud Engineering and Perimeter Hardening**Identity and Access: Design and maintain Microsoft Entra ID Conditional Access policies and cloud IAM boundaries.** • Endpoints and Intune: Configure endpoint security baselines and automated deployment workflows via Microsoft Intune.** • Data Protection: Implement and tune Microsoft Purview Data Loss Prevention (DLP) policies and compliance toolsets.** • Cloud Posture: Deploy technical security controls natively within AWS and Azure to continuously drive up our Secure Score.** • Automation, Vulnerability Management and SecOps.** • Sentinel and SOAR: Architect Microsoft Sentinel, building KQL queries and automated response playbooks to eliminate manual triage overhead.** • Vulnerability Lifecycle: Administer scanning tools, automate continuous asset discovery, and technically validate remediation efforts with IT infrastructure teams.** • Operations: Participate in a weekly on-call operational rotation with two team members to investigate and remediate technical escalations.** • Vendor Engineering: Partner directly with vendors to ensure our security tools are integrated and utilized to their maximum potential.** • Security Approvals and Operational Support.** • Access and Exceptions: Review, triage, and technically validate security exceptions, identity exclusions, and access requests.** • Technical Assessments: Evaluate third-party vendor software architectures to identify infrastructure risks.** • Awareness Training: Manage the KnowBe4 platform to deploy automated phishing simulations and training tracks.

Canada
$85K - $90K / year
ZeroTier, Inc. logo

Product Copywriter – Cybersecurity, Networking

ZeroTier, Inc.

Use the easiest to manage, and most widely supported network virtualization platform, to connect all your devices.

Full TimeRemoteTeam 11-50Since 2015H1B No Sponsor

• Partner with product and technical teams to refine product positioning and develop high-impact narratives that differentiate ZeroTier in a crowded market. • Write and optimize copy across all channels, including high-converting website pages, thought leadership articles, sales enablement assets, and technical playbooks. • Manage and direct a suite of AI writing agents and LLM-based tools to scale content output without sacrificing brand voice or technical accuracy - you are the human-in-the-loop; editing, and governing AI-generated drafts across campaigns, SEO/AEO plays, and enablement assets. • Tailor messaging for specific ICPs, including IT Directors, CISOs, and network security pros across industries like Defense, Healthcare, and Enterprise IT. • Contribute to the strategy and execution of integrated marketing campaigns, ensuring a consistent and authoritative brand voice across all touchpoints. • Move beyond simple blogging to develop substantial evergreen assets such as migration guides, configuration templates, and "build vs. buy" whitepapers.

United States
eTelligent Group LLC logo

Cloud Security and Zero Trust Lead

eTelligent Group LLC

Over the past 15 years, eTel has delivered essential solutions for the federal government by securing and managing data, providing scalable identity access, modernizing legacy systems, and building high-performance platforms. By integrating new technologies and ensuring reliable operations we help agencies stay prepared for future challenges. eTel offers integrated CMMI Level 3 processes, tools, and techniques with innovative, cost-efficient, and secure solutions to address complex challenges. eTel holds ISO 9001:2015, ISO/IEC 27001:2013, and ISO/IEC 20000-1:2018 certifications. Offers dedicated subject matter experts (SMEs) and thought leaders that possess a deep understanding of customers’ environments and challenges.

Full TimeRemoteTeam 51-200

Role Description The Cloud Security and Zero Trust Lead provides leadership for cybersecurity engineering, compliance automation, continuous monitoring, authorization activities, and Zero Trust implementation across the EDP environment. The Security Lead ensures AWS and Databricks platforms operate securely while maintaining compliance with IRS, Treasury, and federal cybersecurity requirements. Key Responsibilities - Lead cloud security architecture and security engineering activities. - Implement Zero Trust security controls and least privilege access models. - Develop and maintain cloud security baselines, security standards, and compliance automation frameworks. - Support ATO development, authorization packages, continuous monitoring, and audit activities. - Manage identity and access management, secrets management, encryption, logging, and monitoring capabilities. - Support Databricks Unity Catalog security controls, data governance, and data protection initiatives. - Coordinate vulnerability management, remediation tracking, and security reporting activities. Qualifications - Minimum 10 years of cybersecurity experience. - Minimum 5 years securing AWS cloud environments. - Experience supporting NIST 800-53, FISMA, FedRAMP, and federal security frameworks. - Experience supporting cloud authorization and compliance efforts. Preferred Certifications - CISSP - AWS Certified Security Specialty - Certified Cloud Security Professional (CCSP) - Certified Information Security Manager (CISM) Commitment to Diversity eTelligent Group provides equal employment opportunities (EEO) to all applicants without regard to race, color, religion, gender, sexual orientation, gender identity, nations origin, age, disability, genetic information, marital status, amnesty, status as a covered veteran, and any other characteristic provided in accordance with applicable, federal, state and local laws.

United States