Senior Information Security & GRC Consultant TPRM (20502)

Om tjänsten

Veritaz is a leading IT staffing solutions provider in Sweden, committed to advancing individual careers and aiding employers in ensuring the perfect talent fit. With a proven track record of successful partnerships with top companies, we have rapidly grown our presence in the USA, Europe, and Sweden as a dependable and trusted resource within the IT industry.

Job Overview

Assignment Description

We are looking for an experienced Senior Information Security / GRC Consultant for an interim assignment. The consultant will strengthen and improve information security governance, supplier risk management and compliance while the organisation recruits a permanent Information Security Compliance Manager.

This is an operational, business-oriented role focused on governance, risk, compliance and supplier security — not primarily technical cybersecurity.

What You Will Work On

• Implement a tool for managing information security risks related to suppliers.
• Conduct and improve security assessments of new and existing suppliers.
• Ensure information security requirements are included in supplier agreements.
• Review security appendices and contractual requirements.
• Develop and improve Third Party Risk Management (TPRM) processes.
• Support information security governance, risk management and compliance.
• Document processes and prepare a structured handover to the permanent employee.

What You Bring

• Strong experience in information security, GRC and risk management.
• Experience with Third Party Risk Management (TPRM) and supplier assessments.
• Good knowledge of ISO 27001 and established information security frameworks.
• Experience conducting information security assessments and risk analyses.
• Experience defining security requirements in contracts, procurement and supplier relationships.
• Ability to independently drive improvements and implement processes and tools.
• Strong communication and stakeholder management skills.

Meritorious

• Knowledge of NIS2 and related regulatory requirements.
• Previous experience as an Information Security Manager, GRC Consultant or Third Party Risk Manager.
• Experience implementing supplier risk management tools.
• Experience from interim assignments in large international organisations.