Gentis SA

Position Overview: The Third-Party Risk Manager is responsible for overseeing and mitigating information security risks related to external suppliers, service providers, and business partners. The primary objective is to ensure strict compliance with the NIS2 Directive and international standards such as ISO 27001, safeguarding the organisation from risks introduced by third parties.<ul class="PlaygroundEditorTheme__ul"><li class="PlaygroundEditorTheme__listItem" value="1">Develop governance structures and processes for third-party risk management, ensuring integration with overall compliance frameworks.</li><li class="PlaygroundEditorTheme__listItem" value="2">Evaluate and classify suppliers based on criticality and risk profile, using established methods aligned with NIS2 requirements.</li><li class="PlaygroundEditorTheme__listItem" value="3">Conduct due diligence and risk assessments for external partners, with a focus on regulatory compliance and risk mitigation.</li><li class="PlaygroundEditorTheme__listItem" value="4">Collaborate closely with internal stakeholders including CISO, procurement, IT, and legal teams, to embed robust security clauses and processes throughout the supplier lifecycle.</li><li class="PlaygroundEditorTheme__listItem" value="5">Monitor ongoing compliance through the implementation of KPIs, SLAs, audits, and data-driven reporting dashboards.</li><li class="PlaygroundEditorTheme__listItem" value="6">Manage incident reporting and escalation with third-party suppliers in accordance with NIS2 Directive timelines and best practices.</li><li class="PlaygroundEditorTheme__listItem" value="7">Organise awareness and training sessions for suppliers, focusing on supply chain security and adherence to NIS2 requirements.</li><li class="PlaygroundEditorTheme__listItem" value="8">Act as the central point of contact for all matters relating to third-party information security risk management and NIS2 implementation.</li></ul>Requirements:<ul class="PlaygroundEditorTheme__ul"><li class="PlaygroundEditorTheme__listItem" value="1">Demonstrable background in information security, cybersecurity, or risk management roles.</li><li class="PlaygroundEditorTheme__listItem" value="2">Thorough knowledge of the NIS2 Directive and/or international standards such as ISO 27001.</li><li class="PlaygroundEditorTheme__listItem" value="3">Proven experience managing suppliers, conducting audits, and defining security clauses in contractual agreements.</li><li class="PlaygroundEditorTheme__listItem" value="4">Advanced skills in communication, reporting, and stakeholder engagement.</li><li class="PlaygroundEditorTheme__listItem" value="5">Fluency in Dutch or French, and professional proficiency in English is essential for this role.</li></ul>

Risk Assessment

Compliance Management

Compliance & Regulatory Affairs

Dutch

French

English

We are looking for candidates who excel in navigating complex compliance environments and have a keen understanding of the evolving regulatory landscape, particularly with regards to information security and supply chain risk. The ideal person is solution-oriented, demonstrating exceptional analytical abilities and a rigorous attention to detail when assessing third-party risks and ensuring robust governance.<ul class="PlaygroundEditorTheme__ul"><li class="PlaygroundEditorTheme__listItem" value="1">Proven expertise in information security, cybersecurity, or risk management, with a demonstrable track record of implementing best practices and frameworks.</li><li class="PlaygroundEditorTheme__listItem" value="2">Strong grasp of the NIS2 Directive as well as standards such as ISO 27001, particularly in the context of supplier management and compliance audits.</li><li class="PlaygroundEditorTheme__listItem" value="3">Skilled communicator who collaborates seamlessly with internal teams (such as IT, procurement, legal, and executive leadership) and external partners to drive a shared commitment to security.</li><li class="PlaygroundEditorTheme__listItem" value="4">Experience integrating security requirements into contracts, performing due diligence, and establishing effective reporting mechanisms and Key Performance Indicators (KPIs).</li><li class="PlaygroundEditorTheme__listItem" value="5">Natural leader and facilitator with the confidence to act as the central point of contact for all matters related to third-party security and NIS2 alignment, fostering awareness through tailored training and stakeholder engagement.</li><li class="PlaygroundEditorTheme__listItem" value="6">Insightful evaluator who applies a structured and pragmatic approach to risk assessment, supplier classification, and oversight of contractual compliance, incident reporting, and audit processes.</li><li class="PlaygroundEditorTheme__listItem" value="7">Resourceful and proactive mindset, always seeking to anticipate emerging risks and act decisively to uphold the organisation’s security posture.</li><li class="PlaygroundEditorTheme__listItem" value="8">Language proficiency in Dutch or French (fluent), with professional-level English communication skills ensuring effective interaction in a multilingual environment.</li></ul>Those who thrive in this role are diplomatic yet assertive, comfortable making informed judgments, and capable of translating complex regulatory requirements into actionable strategies across the organisation and its third-party ecosystem.

By submitting your email address, CV, and any other personal information, you consent to such information being collected, held, used and disclosed in accordance with our privacy policy  : [https://www.gentis.com/en/privacy-policy](https://www.gentis.com/en/privacy-policy) 

Privacy Policy

Gentis

ISO 27001 Lead Auditor

Reporting

Training & Development

Third-Party Risk Manager – NIS2 Compliance

https://hireme-live-api-data.s3.amazonaws.com/cms/71cac45f-fa71-46b2-83ce-4c3e2d9ffe5e/cms-f8a4cd2c-3993-42df-98e9-9568bc6cc412.jpg

Oops! It looks like you've already applied for <mission_title>.

Already Applied

Your bid for <mission_title> has been submitted.

Congratulations!

Sign in

By submitting this form, Bring to the table win-win survival strategies to ensure proactive domination

Sign up

Project application

Didn’t receive the email?

Thank you for applying for the project <mission_title>. We’ve sent you an email to confirm you application.

The input does not match a phone number format

No account yet? Fill the form below to complete your application

Any questions about your privacy? <a target="_blank" href="mailto:hello@wiggli.io" rel="noreferrer">Contact us</a>

Please select the language in which you'd like to see it!

This Job description is in a different language from the one in which you're currently viewing this page

It appears that currently, we don't have opportunities that match your search criteria

To add skills, start by selecting a category, using the dropdown in the upper left corner

Simply upload CV, and our smart system will automatically fill in the remaining required fields.

You can now follow the evolution of your application through our ATS. All future interviews will be organised through our platform, so keep an eye on it.


Your application has been submitted to #! click the link below to view it

You can't apply on wiggly with this email address as it is linked to a # account.

Are you sure you'd like to delete # version?

Is # your correct email without typos? If not, you can restart the application process

Click here to resend the email. Still having trouble?

If you wish to apply anyway, just use the form below to submit your application using another email address.

You're trying to apply for a vacancy with a # account

Third-Party Risk Manager – NIS2 Compliance

Job application

CV document

Upload a .doc, .docx, or pdf file