PRIORITY Quality Consultants is seeking Cyber ISRA & Vendor Risk Assessment Consultants on behalf of one of our clients, a leading organization in the Banking Sector, for a 12-month contract with the possibility of renewal.
The successful candidates will be involved in cybersecurity risk management and regulatory compliance projects, focusing on information security risk assessments, third-party risk management, and the implementation of recognized security frameworks.
Responsibilities:
- Conduct Information Security Risk Assessments (ISRA), identifying threats, vulnerabilities, and potential business impacts.
- Assess information security controls against ISO/IEC 27001, ISO/IEC 27002, and NIST CSF.
- Perform third-party and vendor security risk assessments, including due diligence and periodic reviews.
- Support compliance with regulatory requirements, including DORA, NIS2, GDPR, and relevant EBA guidelines.
- Review security questionnaires, certifications, audit reports, and supporting documentation.
- Maintain risk registers and support ICT third-party risk management activities.
- Identify security gaps, recommend mitigation measures, and monitor remediation activities.
- Collaborate with IT teams, business stakeholders, and external service providers.
- Prepare risk assessment reports and present findings and recommendations.
Requirements
- Bachelor's degree in Computer Science, Information Security, IT, or a related field.
- 3–5 years of experience in Information Security Risk Management, IT Risk, IT Audit, Cybersecurity GRC, or Third-Party Risk Management.
- Knowledge of ISO/IEC 27001, NIST CSF, and information security risk assessment methodologies.
- Familiarity with DORA, NIS2, GDPR, and relevant financial sector regulations.
- Understanding of IT infrastructure, cloud security, network security, and IAM.
- Strong analytical, reporting, and stakeholder management skills.
- Excellent command of Greek and English.
Nice to Have
- Previous experience in banking, financial services, or consulting.
- Experience in vendor risk assessments and ICT third-party risk management.
- Familiarity with ISO/IEC 27005 and NIST SP 800-30.
- Certifications such as ISO 27001 Lead Auditor/Implementer, CISA, CRISC, or CTPRP.
Benefits
What we offer:
- Opportunity to contribute to cybersecurity and regulatory compliance projects within the banking sector.
- Exposure to complex financial services environments and evolving regulatory frameworks.
- Collaboration with experienced cybersecurity professionals.
- Hybrid working model in Athens.
- 12-month contract with potential for renewal.