Senior Third-Party Risk Management Consultant - 2-Year Engagement

Remote, Worldwide

Location: remote. Years of Experience: 8-10 years. Project Duration: 2 years. Language Requirements: Fluency in Arabic & English (written and spoken).

We are seeking a Senior Third-Party Risk Management Consultant to assess and manage risks across the full vendor lifecycle, from onboarding and due diligence through ongoing monitoring and offboarding. The consultant will evaluate third-party cybersecurity, technology, operational, privacy, compliance, and resilience risks; track findings and remediation; and help strengthen TPRM frameworks and reporting. The role involves working closely with procurement, legal, cybersecurity, compliance, and business teams to support informed vendor decisions.

Key Requirements

Strong experience in third-party risk management (TPRM) , including vendor due diligence, inherent and residual risk assessments, and risk-based reviews throughout the vendor lifecycle.

Experience assessing cybersecurity, technology, operational, compliance, privacy, and business continuity risks associated with third parties.

Ability to evaluate vendor security controls using assessment responses, supporting evidence, audit reports, certifications, and independent...