TPSA Senior Consultant
⚲ Kraków
29 400 - 34 650 PLN (B2B)
Wymagania
- Cybersecurity
- risk management
- Cloud security
- AI
- Degree
- Security
- CISSP
- CISA
- CISM
Opis stanowiska
O projekcie:
At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.
Join our client’s team as a TPSA Senior Consultant!
Are you passionate about cybersecurity, risk management, and consulting on global projects? We are looking for a Senior Risk Consultant to drive third-party security assessment and risk consultancy within a major transformation program. This is a unique opportunity to shape and implement an innovative approach to third-party risk assessment, enabling smarter and safer onboarding of critical vendors.
Sounds like your kind of challenge?
#LI- Hybrid – 6 days a month from the office in Kraków
What you get in return
- Flexible cooperation model – choose the form that suits you best
(B2B, employment contract, etc.)
- Hybrid work setup – 6 days a month from the office in Kraków
- Collaborative team culture – work alongside experienced professionals eager to share knowledge
- Continuous development – access to training platforms and growth opportunities
- Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
- High quality equipment – laptop and essential software provided
Wymagania:
- Experience & Knowledge:
- 5+ years in cybersecurity or risk management roles, ideally within financial services or large-scale global enterprises.
- Proven experience in third-party/supply chain governance and risk assessment.
- Familiarity with regulatory expectations and engagement with global stakeholders.
- Technical Skills:
- Strong understanding of risk and control frameworks and their operationalization.
- Knowledge of Cloud Security (SaaS focus), AI risk considerations, and control design.
- Bachelor’s degree in IT security or equivalent experience, complemented by relevant cybersecurity certifications (CISSP, CISA, CISM, CRISC, CCSP).
- Soft Skills:
- Excellent communication and influence skills—capable of translating technical detail into business risk for decision-makers.
- Experience working in agile, complex, and multinational environments.
- Ability to manage multiple priorities, work independently, and deliver at pace without compromising quality.
Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.
Codzienne zadania:
- Define and deliver the TPSA consultancy strategy, ensuring cyber risk methodologies are integrated into supplier management processes.
- Provide end-to-end security risk consultancy during the selection and onboarding of critical third-party suppliers.
- Act as an SME on risk and control frameworks, informing design and remediation strategies for technical and process-related gaps.
- Engage and influence stakeholders globally, including Cybersecurity leadership, Control Officers, Risk Stewards, and regulators.
- Conduct Quality Assurance reviews of TPSA assessments to maintain best-in-class standards.
- Collaborate across multiple teams to drive continuous improvement in third-party security governance.
- Prepare concise presentations, reports, and senior stakeholder updates.
- Contribute to a culture of security excellence and embed new approaches through peer training and advocacy.
At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.
Join our client’s team as a TPSA Senior Consultant!
Are you passionate about cybersecurity, risk management, and consulting on global projects? We are looking for a Senior Risk Consultant to drive third-party security assessment and risk consultancy within a major transformation program. This is a unique opportunity to shape and implement an innovative approach to third-party risk assessment, enabling smarter and safer onboarding of critical vendors.
Sounds like your kind of challenge?
#LI- Hybrid – 6 days a month from the office in Kraków
What you get in return
- Flexible cooperation model – choose the form that suits you best
(B2B, employment contract, etc.)
- Hybrid work setup – 6 days a month from the office in Kraków
- Collaborative team culture – work alongside experienced professionals eager to share knowledge
- Continuous development – access to training platforms and growth opportunities
- Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
- High quality equipment – laptop and essential software provided
Wymagania:
- Experience & Knowledge:
- 5+ years in cybersecurity or risk management roles, ideally within financial services or large-scale global enterprises.
- Proven experience in third-party/supply chain governance and risk assessment.
- Familiarity with regulatory expectations and engagement with global stakeholders.
- Technical Skills:
- Strong understanding of risk and control frameworks and their operationalization.
- Knowledge of Cloud Security (SaaS focus), AI risk considerations, and control design.
- Bachelor’s degree in IT security or equivalent experience, complemented by relevant cybersecurity certifications (CISSP, CISA, CISM, CRISC, CCSP).
- Soft Skills:
- Excellent communication and influence skills—capable of translating technical detail into business risk for decision-makers.
- Experience working in agile, complex, and multinational environments.
- Ability to manage multiple priorities, work independently, and deliver at pace without compromising quality.
Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.
Codzienne zadania:
- Define and deliver the TPSA consultancy strategy, ensuring cyber risk methodologies are integrated into supplier management processes.
- Provide end-to-end security risk consultancy during the selection and onboarding of critical third-party suppliers.
- Act as an SME on risk and control frameworks, informing design and remediation strategies for technical and process-related gaps.
- Engage and influence stakeholders globally, including Cybersecurity leadership, Control Officers, Risk Stewards, and regulators.
- Conduct Quality Assurance reviews of TPSA assessments to maintain best-in-class standards.
- Collaborate across multiple teams to drive continuous improvement in third-party security governance.
- Prepare concise presentations, reports, and senior stakeholder updates.
- Contribute to a culture of security excellence and embed new approaches through peer training and advocacy.
🔍 Dekoder Ogłoszenia
🔴
drive third-party security assessment and risk consultancy within a major transformation program
Będziesz odpowiedzialny za kluczowe procesy związane z bezpieczeństwem dostawców w ramach dużego, potencjalnie chaotycznego projektu transformacyjnego.
🔴
shape and implement an innovative approach to third-party risk assessment
Może to oznaczać tworzenie nowych procesów od zera, co wiąże się z niepewnością i brakiem ustalonych ścieżek.
🔴
enabling smarter and safer onboarding of critical vendors
Twoja praca będzie miała bezpośredni wpływ na procesy biznesowe, co może oznaczać dużą presję i odpowiedzialność.
🔴
Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.)
Choć brzmi to elastycznie, często oznacza preferencję pracodawcy dla modelu B2B ze względu na niższe koszty i mniejsze zobowiązania.
🟡
Collaborative team culture – work alongside experienced professionals eager to share knowledge
Może oznaczać, że zespół jest bardzo zaangażowany i oczekuje aktywnego udziału oraz dzielenia się wiedzą, co może być czasochłonne.