Third Party Cyber Security Expert (all genders)

Your role:

The Third Party Cyber Security Expert position is an integral member of the company's Group Cyber Security organization. In this role, you will drive development and evolution of Third Party Cyber Security Risk Management policies, standards, and procedures to protect the confidentiality, integrity, and availability across the company's supplier landscape. As a member of the global Cyber Security Organization, your main responsibilities are:

1. Develop and maintain Third Party Cyber Security Risk Management capabilities including methodology, supporting processes, and tools to identify and mitigate Cyber Security risks.
2. Address and drive assessments of the company's suppliers and maintain oversight of critical suppliers and their relation to the company.
3. Collaborate closely with stakeholders to address and mitigate gaps in Risk Management processes.
4. Maintain contractual addendum to address cyber security requirements in supplier contracts and provide guidance and support in RfP and due diligence during negotiation phases including cyber security-related contract reviews.
5. Work closely with stakeholders such as procurement and legal to incorporate Cyber Security requirements into supplier contracts.
6. Consult businesses in answering requests related to the company's Cyber Security posture.
7. Support the development of the Cyber Security Governance Policy and Control Framework in compliance with industry standards, regulatory requirements, and best practices.

Who you are:

1. Bachelor’s degree or equivalent in computer science, engineering, intelligence studies, or related field.
2. Minimum of 5 years’ experience in Third Party Security Risk Management or equivalent security-related areas.
3. Strong analytical and interpersonal communication skills, including the ability to communicate effectively and build consensus with teams across organizational lines.
4. Demonstrated experience across multiple cyber security domains (e.g., IT, OT, IoT, and Digital Products).
5. 1 or more industry-recognized security professional certifications are considered an advantage (e.g., CISA, CISM, CISSP, CCSP).
6. Professional with a positive attitude and capable of contributing to a dynamic and team-oriented culture.
7. Fluent in English; additional language skills (e.g., German) are considered an advantage.

Department: EF-SQ-SCB Security Business Enablement

Job Evaluation: AT / Expert 3