Grant Thornton Global Delivery Center Poland

Third Party Risk Management Manager (Poznań - hybrid)

17k - 23k PLN17 000 - 23 000 PLN/ mies./ mies.UoPUmowa o pracę (brutto)

SeniorHybryda·PoznańFull-time·Umowa o pracę

#456911·Dodano 22 dni temu·3

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

risk managementThird-Party Risk ManagementTPRMTeam managementSecurityGRCCybersecurityAIOneTrustBitSightM&ASupply Chain SecurityCloud securityISONISTAudit

Firma i stanowisko

Grant Thornton Global Delivery Center Poland (GDC) offers audit, assurance, tax, and advisory services as part of the Grant Thornton International Ltd network, operating in over 150 markets worldwide. The GDC supports multinational platform operations, facilitating collaboration across countries, markets, and time zones, providing opportunities to work on complex projects and develop advanced skills in an inclusive team environment.

Wymagania

10+ years of experience in Third-Party Risk Management (TPRM), Supply Chain Risk Management, Information Security Risk, Governance, Risk & Compliance (GRC), or related cybersecurity functions.
Demonstrated experience leading enterprise-scale TPRM programs, operations, and governance frameworks across multiple regions and business units.
Strong expertise in supplier risk assessments, due diligence, risk reporting, incident management, and regulatory compliance requirements.
Hands-on experience with OneTrust TPRM, third-party risk assessment methodologies, workflow configuration, and process optimization.
Experience with continuous monitoring platforms such as BitSight and integrating security posture insights into risk management decisions.
Proven leadership experience managing teams, driving organizational change, resolving complex stakeholder issues, and influencing executive-level decisions.
Familiarity with AI tools, workflow automation platforms, and integrating AI into existing systems is preferred.
Fluency in Polish and English.

Preferred Qualifications:

Experience developing automation using Copilot or other Agentic AI frameworks.
Experience leading TPRM activities during mergers, acquisitions, divestitures, and integration programs.
Knowledge of emerging risks including AI, cloud security, geopolitical risk, privacy, and evolving regulatory requirements.
Experience implementing automation, AI-driven workflows, analytics, and operational transformation initiatives within TPRM or cybersecurity programs.
Familiarity with enterprise risk frameworks and standards such as ISO 27001, NIST, SOC 2, PCI DSS, and privacy regulations.
Experience collaborating with Procurement, Legal, Privacy, Internal Audit, and Enterprise Risk Management teams.
Strong executive communication skills with a proven ability to present complex risk concepts to senior leadership, boards, and auditors.

Obowiązki

Lead and evolve the EMEA Third-Party Risk Management (TPRM) program, aligning strategy with regulatory, business, M&A, and InfoSec Supply Chain Risk Management objectives.
Oversee end-to-end TPRM operations, including due diligence, risk assessments, reassessments, exception management, SLA performance, and operational scalability.
Develop and deliver executive, regulatory, and operational reporting, providing actionable risk insights and ensuring data accuracy and traceability.
Lead TPRM integration for M&A activities, including acquisition due diligence, supplier risk assessments, onboarding into TPRM frameworks, and Day-0/30/90 integration objectives.
Own the supplier security incident management framework, coordinating breach response, impact assessments, remediation, and executive reporting.
Drive AI, automation, and innovation initiatives to improve efficiency, decision-making, risk visibility, and operational effectiveness across TPRM processes.
Own and optimize OneTrust TPRM workflows, assessments, questionnaires, control mappings, and platform integrations.
Govern continuous supplier monitoring through BitSight and similar tools, driving risk-based supplier engagement, remediation, and executive reporting.
Define, track, and continuously improve TPRM KPIs, KRIs, maturity metrics, and performance reporting.
Build and lead a high-performing TPRM organization through hiring, workforce planning, mentoring, coaching, succession planning, and stakeholder engagement.

Benefity

Hybrid working model (2 days office, 3 days remote).
Stable employment with an employment contract.
Private medical care.
Benefits package including MultiSport and a benefits platform.
Opportunity to work in an international environment and collaborate with experienced professionals.
Teamwork-driven culture with knowledge sharing.
Well-structured onboarding program.
Clear career development paths and access to learning and certification programs.
Access to training platforms and tools supporting professional growth.
Inclusive workplace welcoming people with disabilities.
Modern office located in Malta Office Park, Poznań.
Sport subscription.
Training budget.
Free coffee.
Bike parking.
Mobile phone.
In-house trainings.

Karta sportowa

Opieka zdrowotna

Dofinansowanie szkoleń

Napoje w biurze

Parking dla rowerów

Telefon

Szkolenia wewnętrzne

Grant Thornton Global Delivery Center Poland

14 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz