Especialista en Riesgos Tecnológicos de Terceros (ITR3P)
Core
Evaluate, mitigate, and govern technology risks associated with key third-party providers, including cloud infrastructure and complex system architectures.
Role type
Senior third-party risk specialist (cybersecurity & cloud)
Builds
Risk control frameworks, technical due diligence reports, and compliance audits for vendor supply chains.
Domain
Financial services / Cybersecurity / Cloud Infrastructure
Required skills
Technical risk assessment, IT security due diligence, contract negotiation, ISO 27001 auditing, process mapping, regulatory compliance (DORA), risk residual calculation, secure data decommissioning.
Preferred skills
Master's in Risk Management, Internal Auditor certification, European DORA regulation knowledge.
Technologies
Cloud infrastructure, engineering tools, ISO 27001 frameworks.
Responsibilities
Analyze and evaluate technology risk levels of providers using corporate engineering tools; execute independent technical due diligence focused on IT security and business continuity; manage internal/external audits and ensure compliance with findings; perform periodic evaluations of critical providers and track remediation; ensure technical viability for contract termination including secure data deletion; implement process improvements for ITR3P and operational losses.
Seniority
Mid-Senior, hands-on IC
