Third Party Risk Management

About the Job:
The company is an IT services, consulting, and business solutions organization with over 50 years of experience partnering with many of the world’s largest businesses on their transformation journeys. The company delivers a consulting-led, cognitive-powered, integrated portfolio of business, technology, and engineering services.

Key Responsibilities:

• Perform security reviews of supplier responses within the client’s risk management platform tool (customized Archer).
• Create internal risk reports following the client’s report template, documenting risk severity and identified findings.
• Consult with Supplier Portfolio Managers to determine risk treatment and enable informed decisions on third-party selections.
• Track and monitor risk mitigation and remediation of third parties.
• Maintain frequent communication with suppliers to ensure compliance with the client’s privacy and security requirements.

Education/Professional Qualifications:

• Bachelor’s degree or international equivalent or equivalent work experience.
• Preferred certifications include CTPRP, CISA, CISM, CRISC, CISSP, or ISO27001 Lead Auditor.

Experience & Skills:

• 5-6 years performing Security Risk Assessments, ensuring compliance with industry standards and global regulations.
• Strong understanding of ISO 2700 series, SAMA regulation, SOC 1, SOC 2, and SOC 3.
• Knowledge of COBIT, NIST, and Risk IT frameworks, along with cloud security and related regulatory requirements (e.g., GDPR, CCPA).
• IT experience with security/infrastructure protection and information technology audit.
• Proficiency with UNIX, Windows, and incident response environments.

Requirements:

• Fluent in English with strong communication skills (written and oral).
• Proficient in MS Office suite (Word, Excel, PowerPoint).
• Self-motivated, able to prioritize tasks, and handle change effectively.
• Strong knowledge of Security Risk Management, Information Security, and Data Privacy.
• Availability to occasionally accommodate hours for global time zones.

Location: Riyadh, Saudi Arabia
Job Type: Full-time
Work Conditions: On-site
Application Deadline: September 30, 2026.