Third Party Risk Management Specialist
Overview
Responsible for assessing and managing security risks arising from Dis-Chem’s external vendors, technology partners, and service providers. Establishes and maintains Dis-Chem’s third-party security due-diligence framework, evaluates vendor controls before onboarding, and monitors ongoing compliance across the vendor lifecycle.
Requirements
- Degree in Information Security, IT, Risk Management, or related field
- 5+ years’ experience in IT security or vendor risk management, preferably in a multi-vendor environment
- Exposure to outsourced service models, SOC/MDR providers, and cloud-hosted solutions
Responsibilities
- Develop and maintain the third-party security assessment and onboarding framework for all technology vendors
- Establish security requirements, minimum controls, and contractual clauses for IT suppliers
- Maintain a central third-party risk register and ensure risk ratings, remediation actions, and exceptions are documented and reviewed
- Conduct risk assessments for new vendors and high-risk services
- Identify control gaps and recommend mitigation across domains
- Monitor vendor security posture continuously through attestations, performance metrics, and threat intelligence
- Support incident investigation when a vendor-driven outage or cyber event impacts Dis-Chem
- Provide reporting to CISO, Procurement, and Leadership on vendor risk levels, trends, and areas requiring uplift
How to apply
Verify before you apply
SpanSam summarises opportunities for easier discovery. Always confirm the closing date, eligibility requirements and submission instructions on the original source before sending personal information or documents.
About this listing: SpanSam is an opportunity discovery service and is not the hiring employer unless explicitly stated. Application decisions and source-listing changes are controlled by the employer or institution.