Senior Third-Party Risk Specialist

About This Opportunity

Our talent team is representing a confidential AI technology organization seeking a Senior Third-Party Risk Specialist in Paris. This role offers the opportunity to build and lead critical risk management frameworks within a fast-growing technology environment serving enterprise clients across finance, healthcare, manufacturing, and the public sector.

As a senior member of the risk and compliance function, you will design and oversee the entire third-party risk management program, ensuring vendors, partners, and service providers meet rigorous security and regulatory standards. This is a strategic role requiring both technical depth and cross-functional collaboration.

Responsibilities

• Design, implement, and maintain a comprehensive third-party risk management framework covering vendor identification, assessment, and ongoing monitoring
• Perform due diligence, compliance assessments, security audits, and contractual reviews to ensure third parties meet organizational and regulatory requirements including GDPR, NIS2, and DORA
• Collaborate with Procurement, Legal, Security, and Operations teams to integrate risk requirements into vendor selection, contract negotiation, and monitoring processes
• Review, edit, and negotiate contractual terms to align with security and compliance standards (contract redlining)
• Identify and remediate gaps or incidents related to third-party relationships, coordinating corrective actions through resolution
• Develop and deliver training programs to educate internal stakeholders on third-party risk management responsibilities
• Maintain comprehensive documentation of assessments, decisions, and remediation activities to support internal and external audits
• Monitor evolving regulations (NIS2, Cyber Resilience Act, GDPR) and standards (ISO 27001, SOC 2, ISO 27036), proposing framework adjustments as needed
• Drive continuous improvement of third-party risk management tools, platforms, and methodologies
• Ensure alignment between third-party risk management and broader cybersecurity and compliance objectives

What We're Looking For

• 7+ years of experience in third-party risk management, cybersecurity compliance, information security governance, or closely related fields
• Proven track record supporting cybersecurity compliance programs, certification processes, or external audits
• Practical knowledge of standards and frameworks including ISO 27001, SOC 2, NIST SP 800-53
• Deep familiarity with European cybersecurity regulations such as NIS2, DORA, GDPR, Cyber Resilience Act, or LPM
• Proficiency in risk assessment methodologies (EBIOS RM, ISO 27005, or equivalent)
• Strong contract review and negotiation skills with ability to redline vendor agreements for security and compliance alignment
• Exceptional organizational skills and attention to detail, capable of managing complex documentation and coordinating multiple stakeholders
• Excellent written and verbal communication skills with ability to translate technical requirements for diverse audiences
• Strong analytical and problem-solving capabilities
• Demonstrated ability to work collaboratively across technical, legal, commercial, and operational teams
• Professional proficiency in English required; French proficiency is a strong advantage

How We Work With You

Candidates apply directly through Get A Job.ai. Our recruiting team will conduct an initial screening to understand your background and ensure alignment with the role requirements. Qualified candidates will then be submitted to our client for consideration. Please do not attempt to contact the client organization directly, as all communication and coordination will be managed through our talent team to ensure a smooth and professional process.

Pay

Compensation details will be discussed during the screening process based on experience level and qualifications.

Equal Opportunity

Get A Job.ai is committed to equal employment opportunity regardless of race, color, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, or veteran status.