E

EPSA

Global performance, procurement, and innovation advisory

Information Security Expert - Vendor Risk & Security Due Diligence

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeÎle-de-France, FranceNo salary listed

About the Job

Requirements

  • More than 5 years of experience in information security, cyber risk analysis, vendor assessment, cloud architecture, IT audit, or a related field.
  • Fluent English at B2 level or above, in writing and speaking.
  • Knowledge of cyber threat and risk analysis, vendor assessment, and security risk analysis methodology.
  • Ability to analyze complex business and IT scenarios.
  • Ability to write structured deliverables explaining the Security by Design framework and its benefits to business and technical audiences.
  • Experience in project and budget contexts.
  • Ability to coordinate business and technical stakeholders.
  • Required certifications: ISO 27001 Lead Auditor and ISO 27005, or equivalent.

Responsibilities

  • Conduct security due diligence on the vendor risk management framework.
  • Support quality control of Information Security and Operational Risk vendor assessments.
  • Contribute to preparation of vendor risk committees.
  • Identify and analyze product, project, and vendor risks; recommend mitigation options and document them in language understandable to business audiences.
  • Produce documented vendor risk assessments covering risks, mitigation recommendations, and rationale.
  • Produce quality-control deliverables for Information Security and Operational Risk assessments.
  • Prepare vendor risk committee documentation and materials.
  • Produce security due diligence reports on the vendor risk management framework.
  • Maintain structured product, project, and vendor risk registers.

Desired Qualifications

  • CISSP, CISSP-ISSAP, CISM, or GIAC certification.
  • Business continuity certification such as MBCI, DRII, or equivalent.

About the Company

EPSA

Global performance, procurement, and innovation advisory

EPSA provides advisory and services to boost organizational performance and profitability worldwide. It blends four core areas—purchasing, organizational design, performance and change management—along with financing of innovation, optimization of tax and social charges, and support for energy and environmental initiatives, plus a marketplace, all via an integrated digital platform. A global team of about a thousand delivers end-to-end support from strategy and governance to execution and funding, with a tailored, durable approach for each client. Its goal is to help organizations sustainably improve performance and profitability by offering customized, efficient, and responsible solutions that combine consulting, financing, project execution, and market access.

Company size
1,001-5,000
Company stage
Debt Financing
Total funding
$220M
Headquarters
Paris, France
Founded
2001

Recently Posted Jobs

Explore more opportunities at EPSA

See more jobs