Descripción de la oferta
Capitole keeps growing and we want to do it with you!
Para presentar una candidatura, simplemente lea la siguiente descripción del puesto y asegúrese de adjuntar los documentos pertinentes.
We are looking for an IT Vendror Risk Analyst / Third-Party Risk Management (TPRM) Specialist to join a growing international organization operating in a highly regulated environment.
In this role, you will play a key part in ensuring that risks associated with third‑party vendors are properly identified, assessed, and managed across the group. You will work closely with Procurement, IT, Security, and Risk teams to strengthen vendor governance and support regulatory compliance initiatives.
This is a fully remote position within an international and collaborative environment.
Key Responsibilities
Perform risk assessments of third-party vendors (pre- and post-contract).
Evaluate suppliers' control environments, focusing on IT, security, and operational risks.
Identify and document risks, and define mitigation and remediation actions.
Monitor vendor risk throughout the lifecycle, including periodic reassessments.
Collaborate with Procurement and Legal teams during onboarding and contracting processes.
Support the implementation and improvement of Third‑Party Risk Management frameworks.
Ensure alignment with internal policies and regulatory requirements (e.g., DORA, ISO standards).
Track and report on vendor risk exposure, remediation status, and compliance.
Prepare clear and structured reports and presentations for senior stakeholders.
Act as a point of contact for vendor risk topics across different business entities.
Required Skills & Experience
+4 years of experience in IT Risk, GRC, Third‑Party Risk Management, or similar roles.
Strong understanding of vendor risk assessment methodologies.
Experience working with regulatory frameworks (e.g., DORA, ISO 27001, NIST, or similar).
Background in IT, cybersecurity, risk, or compliance is highly valued.
Experience in multinational or regulated environments (banking, insurance, consulting, etc.).
Strong analytical and problem‑solving skills.
Ability to work autonomously in a remote and international environment.
Excellent communication and stakeholder management skills.
Fluent English (mandatory). Spanish will be desirable.
Nice to Have
Experience with GRC or TPRM tools.
Exposure to procurement or vendor management processes.
Knowledge of outsourcing regulations or operational resilience frameworks.
Certifications such as CISA, CRISC, ISO 27001, or similar.
Benefits
Budget of €1,200 for individual training so you can use it for whatever you want.
Follow up with your team every month to have continuous feedback.
Full Remote.
Time flexibility to help you balance your professional/family life.
Private medical insurance paid entirely by Capitole.
Flexible remuneration (restaurant, transportation and/or daycare tickets).
Wellhub.
Discounts on big brands for employees (Club Capitole).
Team buildings every two months. You can't miss the summer party or Christmas dinner!
Soccer team sponsored by Capitole.
Technological communities so you can share your knowledge and ideas with other teams.
Information Security Policies
He/she will have access to confidential information relating to Capitole and the project he/she is working on.
Will have to comply with the security policies and internal policies of the company and client.
You will have to sign an NDA.
#J-18808-Ljbffr
