ICT Third Party Risk Specialist

ICT Third Party Risk Specialist The Opportunity Tired of sending supplier questionnaires and never seeing what happens next? In this role, you're the one who decides whether supplier risk is acceptable. An international group is strengthening its independent, second line oversight of technology suppliers. You'll be the specialist who challenges how outside providers are chosen, contracted, governed and replaced. Your work sits where cybersecurity, resilience and risk meet, so you get broad exposure and real influence rather than a narrow slice of one discipline. The scope is shaped around you. Early in your risk career? You'll get structure and room to build your cyber and digital resilience expertise on the job. Already an established specialist? You'll have the authority to set methodology and standards across the group. If you only match part of what's below, apply anyway. A partial fit is no barrier here. The Role Review assessments, due diligence, contract terms and mitigations, then make the call on whether the remaining supplier risk is acceptable. Advise the business across the full provider lifecycle, from selection to exit, and challenge decisions when they need challenging. Spot single points of failure, over-reliance on key providers and changes in provider risk, and escalate before they become problems. Join security reviews, cyber posture checks and inspections, and follow incidents through to resolution. Test the strength of exit and transition plans, and the testing behind them. Shape the group's methodology, minimum standards, governance and controls, plus the processes and tools behind them. Work with entities in other countries so standards are applied consistently, and push back where they slip. Turn your findings into KPIs, KRIs and reporting that give decision-makers a clear risk picture. The Company Our client is an international group investing in stronger oversight of its technology supply chain. You'll work with cross-functional colleagues in several countries, which means your judgement shapes how the whole group manages supplier risk, not just one local entity. What You'll Need Experience in ICT or operational risk, information security, supplier management, audit, compliance or resilience. Excellent written and spoken English. How to Apply Interested? Get in touch with the MAM Gruppe team for a confidential conversation. Your CV doesn't need to be up to date. Send what you have, or just give us a call.

Chief Information Security Officer The Opportunity Most CISOs inherit a security agenda. Here, you write it. If you're a senior security leader who wants a genuine seat at the top table, rather than a function that gets consulted after decisions are made, this is worth a closer look. You'll be the most senior voice on cyber risk across a global group, reporting to the CIO and advising the executive team directly. The organisation is in the middle of an ambitious growth and change agenda, which means security here isn't a maintenance job. You'll shape how the group protects its most valuable assets as it grows, with the remit to make that strategy real. The Role You'll own security end to end, from long-term direction to day-to-day operations. Set the group's security strategy and turn it into a clear, prioritised plan the business can follow. Advise the executive team whenever cyber risk, a serious incident or a major investment decision is on the table. Lead security operations, so the organisation is ready to detect, contain and recover from attacks. Build the policies, controls and compliance processes that hold every part of the business to one consistent standard. Make sure new technology, change programmes and suppliers are secure from day one, not fixed after the fact. Grow an international team and build a culture where every employee takes ownership of security. Represent the organisation on security matters with clients, auditors and regulators. Because the business is changing, you won't be defending a static estate. You'll be designing security into what the group becomes next. The Company Our client is a global organisation operating across multiple countries, with an international security team and a leadership group that treats cyber risk as a top-level business issue. The CISO answers to the CIO and has direct access to the executive team, so your recommendations on risk, incidents and investment reach the people who make the final call. What You'll Need Experience leading a security function at senior level, as a CISO or equivalent. A track record of taking security programmes from strategy to delivery across multiple countries. Technical grounding in cloud, identity, security operations and supplier risk. Working knowledge of frameworks such as ISO 27001, NIST, NIS2 and GDPR. Fluent English and a willingness to travel. How to Apply Interested? Get in touch with the MAM Gruppe team for a confidential conversation. Your CV doesn't need to be up to date. Send what you have, or just give us a call.

Director Information Security The Opportunity Tired of security being treated as an IT problem? Here, it isn't. This role sits outside IT and reports directly to the executive board. Your recommendations go straight to the people who make decisions, without being filtered through a technology function first. You'll be building, not inheriting. There's no existing team to restructure and no legacy operating model to unpick. You'll hire your own people, shape how they work, and set the standard for how security governance runs across the business. You'll also have a clear mandate. Owning NIS2 end to end gives you the board attention and cross-functional reach that many security leaders wait years for. The salary is €160,000–180,000. The Role You'll lead security across the group's corporate functions, working alongside the CISO and senior business leaders. You will: Be the go-to voice on security for the board and functional heads, and represent the corporate functions in governance forums. Own the NIS2 programme from roadmap and resourcing through to a sustainable operating model, so compliance becomes how the business works, not a one-off project. Define security ownership, escalation and reporting, so business teams know exactly what they're accountable for within group-wide standards. Track risks, audits and remediation, giving leadership a reliable view of exposure and control effectiveness. Strengthen incident, crisis and continuity readiness, alongside supplier security, access management and resilience. Connect the business with established central capabilities in security operations, identity management, architecture and penetration testing. Recruit and lead a dedicated team, supported by security champions embedded across the business. The Company Our client is a large, group-structured organisation operating within the scope of NIS2. It already has a mature central security function led by a CISO, which means you won't be fighting for basic tooling or operational capability. What it needs now is dedicated security leadership for its corporate functions, with the authority to make governance stick. This is a chance to define that role from day one and put your name on how it's done. What You'll Need 8+ years in information security, including leadership at director level. Experience advising board or C-level stakeholders on security. Fluent English. Willingness to work on site. How to Apply Interested? Get in touch with the MAM Gruppe team for a confidential conversation. Your CV doesn't need to be up to date. Send what you have, or just give us a call.

Associate Partner Cyber Security Sales The Opportunity If you're already winning Cyber Security business for someone else, when do you start building something that's genuinely yours? This role gives you ownership of a strategic sales pipeline within an established consulting business, with real autonomy to grow it your way. You'll be measured on revenue and account growth, and there's a genuine path to Partner level for the person who delivers. The Role You'll identify and win enterprise Cyber Security clients across Germany, running full sales cycles from first contact through to proposal, negotiation and close. You'll build direct relationships with CISOs, CIOs and CTOs, working as a trusted advisor rather than a vendor. You'll also take ownership of a set of existing strategic accounts, finding ways to expand the Cyber Security services they already buy. This isn't a delivery role. You won't be running projects yourself. Your job is to open doors, grow revenue, and help shape where the Cyber Security practice goes next, including feeding into go-to-market strategy and tracking regulatory and market developments that create new commercial opportunities. You'll work closely with colleagues across the wider consulting business, drawing on their relationships and expertise to open doors you couldn't reach alone. The Company You'll be joining an established consulting organisation whose Cyber Security practice is still being shaped, not one that's already fixed in place. That means real influence over how the practice grows, who it targets, and how it's positioned in the German market. It's a business with the scale and credibility to open enterprise doors, but with enough flexibility that a strong commercial lead can still make their mark and be recognised for it. What You'll Need Significant experience in Cyber Security consulting, professional services or technology advisory A demonstrable track record of Cyber Security sales and revenue generation Proven success winning new enterprise clients in Germany Experience growing and expanding existing strategic accounts An established network of senior decision-makers in the German market Comfort engaging credibly with CISO, CIO, CTO and executive-level stakeholders Fluent German and strong English How to Apply Interested? Get in touch with the MAM Gruppe team for a confidential conversation about this role. Your CV doesn't need to be up to date. Send what you have, or just give us a call.