Senior Third-Party Risk Management Consultant (2-year remote)

About the role

We are looking for a Senior Third-Party Risk Management Consultant to lead a two‑year remote engagement. The consultant will assess and manage risks throughout the vendor lifecycle, from onboarding and due diligence to ongoing monitoring and off‑boarding, working closely with procurement, legal, cybersecurity, compliance and business teams.

Key responsibilities

• Plan and execute TPRM engagements, delivering risk assessments and due‑diligence reviews for new and existing third‑party relationships.
• Evaluate cybersecurity, technology, operational, privacy, compliance and business‑continuity risks using vendor responses, audit reports, certifications and independent assurance evidence.
• Maintain and update third‑party risk registers, remediation plans, risk exceptions and governance documentation.
• Monitor high‑risk vendors through periodic reviews, security alerts, performance metrics and emerging‑threat assessments.
• Analyze concentration, dependency and fourth‑party risks to support supply‑chain resilience objectives.
• Collaborate with cross‑functional stakeholders to ensure comprehensive risk evaluations and alignment with contractual security clauses, SLAs and data‑protection obligations.
• Provide management reports, dashboards and executive presentations highlighting risk posture, critical findings and remediation progress.

Required profile

• 8‑10 years of experience in third‑party risk management, including vendor due diligence, inherent and residual risk assessments, and risk‑based reviews.
• Strong knowledge of cloud services, SaaS platforms, managed services and related fourth‑party risk considerations.
• Familiarity with contractual risk requirements such as security clauses, audit rights, incident‑notification obligations and data‑protection standards.
• Fluency in Arabic and English, both written and spoken.

Required skills

• Third‑Party Risk Management (TPRM) methodology and frameworks.
• Vendor due‑diligence and risk‑assessment techniques.
• Cybersecurity and cloud services risk evaluation.
• Business continuity and operational resilience assessment.
• Risk register management and remediation tracking.