Senior Third-Party Risk Management Consultant - 2-Year Engagement
MENA Consultant · Operations · Senior · 1mo ago
Anyone, anywhere in the world can apply.
AI review: Checked the employer's own posting (https://job-boards.eu.greenhouse.io/menaconsultant/jobs/4989793101). Evidence: "Location: remote."
Applies on the original listing · via Himalayas
Who can apply
Read straight from the listing, so you know before you spend time on it.
Anyone, anywhere in the world can apply.
“Location: remote.”
- Async-first
- The listing doesn't promise async-first working.
- Contractor / B2B
- No mention of hiring international contractors or invoicing.
- Global stipend
- No home office or equipment budget mentioned.
- Annual retreat
- No company-paid get-togethers mentioned.
Read from the listing automatically. Always confirm the details with the company before you accept an offer.
About the role
As a Senior TPRM Consultant on this two-year engagement, you will assess and manage risks across the full vendor lifecycle, from onboarding and due diligence to ongoing monitoring and offboarding. You will evaluate cybersecurity, operational, privacy, compliance, and resilience risks, oversee remediation plans, and enhance third-party risk management frameworks and governance reporting.
What you'll do
- Conduct inherent and residual risk assessments and due diligence reviews for third parties, vendors, and outsourced service providers.
- Evaluate third-party security controls, governance practices, and compliance postures against regulations, NCA controls, and internal policies.
- Develop and maintain vendor risk registers, assessment records, risk treatment plans, and exception processes.
- Assess third-party business continuity, disaster recovery, and operational resilience capabilities.
- Review contractual security terms, SLAs, data protection clauses, audit rights, and incident notification requirements.
- Prepare management reports, risk metrics, and executive presentations highlighting overall vendor risk posture and remediation progress.
What you bring
- 8-10 years of experience in third-party risk management (TPRM) across the complete vendor lifecycle.
- Fluency in both Arabic and English (written and spoken).
- Proven experience assessing cybersecurity, technology, operational, compliance, privacy, and business continuity risks.
- Knowledge of risks tied to cloud services, SaaS platforms, managed services, concentration risk, and fourth-party exposure.
- Familiarity with contractual risk requirements, cybersecurity standards, privacy regulations, and NCA controls.
About MENA Consultant
MENA Consultant is a consulting firm providing specialized advisory and risk management services across business and technology domains.
View MENA Consultant profile & open roles →