The Third-Party Risk Manager (TPRM) is responsible for setting up, managing, overseeing and mitigating the information security risks associated with third-party vendors, suppliers, service providers, and contractors, and this in alignment with the NIS2 Directive.
This role ensures that external partners meet the organization's security standards and policies, comply with NIS2 obligations, and do not introduce unacceptable risks to business operations.
The manager will build and maintain strong relationships with third parties, facilitate risk assessments, and collaborate with internal stakeholders to enhance business resilience against information security threats.