Third Party Risk Management Lead
12-Month Fixed Term Contract
Salary: Circa €80,000 per annum
Dublin
About the Company
This role is with a major national transport provider, operating essential infrastructure and services that connect people and communities across Ireland. As a state-owned organisation, it plays a vital role in delivering safe, efficient, and sustainable public transport, while undergoing significant digital and operational transformation. With a strong focus on safety, regulatory compliance, and innovation, the organisation offers a dynamic and purpose-driven working environment.
About the Position
We are seeking a highly motivated Third Party Risk Management Lead to join our Cyber Security team on a 12-month fixed term contract. This is an exciting opportunity to lead the development and execution of our Third Party Risk Management (TPRM) framework within a dynamic and regulated environment.
As the TPRM Lead, you will play a vital role in assessing, managing, and monitoring cyber, operational, and compliance risks associated with external vendors, partners, and service providers. You’ll work closely with internal stakeholders and contribute to a secure and resilient vendor ecosystem.
Key Responsibilities
-
Design, implement, and enhance our Third Party Risk Management framework in line with legal, regulatory, and business requirements.
-
Conduct in-depth supplier IT risk assessments by reviewing cyber security questionnaires and supporting documentation, identifying gaps and recommending controls.
-
Monitor third-party risk profiles on an ongoing basis and ensure timely follow-up on remediation plans.
-
Collaborate with internal departments (e.g. Legal, Procurement, IT Security) to align on risk appetite and control expectations.
-
Maintain records of assessments and risk ratings, ensuring transparency and audit readiness.
-
Act as a subject matter expert and mentor to colleagues involved in supplier governance and security assurance processes.
Experience/Requirements
-
Proven experience in Third Party Risk Management, ideally in a public sector or regulated organisation (e.g. finance, utilities, healthcare, government).
-
Strong understanding of cybersecurity risk frameworks, vendor due diligence, and risk mitigation strategies.
-
Comfortable working independently with minimal supervision and able to handle complex problem-solving.
-
Excellent communication and interpersonal skills – capable of building consensus and influencing stakeholders.
-
A proactive, structured approach to documentation, analysis, and decision-making.
Remuneration Package
-
Salary: Circa €80,000 per annum
-
Annual Leave: 25 days annual leave (rising to a max of 28 with service)
-
Sick Pay: 20 days certified sick leave within a 12-month rolling period
-
Travel Benefit: After 1 month, a PTI (Public Transport Ireland) card will be issued covering you, your spouse, and dependents
-
Pension: Entry into the PRSA pension scheme
Contact
If you are ready to take ownership of a critical risk domain and thrive in a collaborative, security-conscious environment, we’d love to hear from you.
Please contact Conor McGurry on 01 5927853 or email or simply click the apply button.
To view all live jobs with Brightwater and market insights, please visit our website; www.brightwater.ie