Senior Information Security & GRC Consultant TPRM (20502)
Veritaz AB · Lund · 6 månader – upp till 12 månader · Deadline 2026-12-02
Veritaz is seeking a **Senior Information Security & GRC Consultant TPRM** for an **interim assignment** to strengthen supplier risk management, compliance, and governance while a permanent manager is recruited. This operational, business-oriented role focuses on governance, risk, compliance, and supplier security rather than technical cybersecurity. Key duties include implementing a supplier risk tool, conducting and improving security assessments for new and existing vendors, defining security requirements and reviewing contractual appendices, enhancing third-party risk management (TPRM) processes, and ensuring a structured handover to the incoming permanent employee. Candidates must have strong experience in information security, GRC, and risk management, alongside practical **TPRM and supplier assessment experience**. Solid knowledge of ISO 27001 and established security frameworks is required, as is a demonstrated background in running risk analyses, setting security requirements in contracts and procurement, and independently implementing processes and tools with strong stakeholder management. Meritorious qualifications include knowledge of NIS2, past experience as a Third Party Risk Manager or Information Security Manager, prior implementation of supplier risk tools, and experience from interim assignments in large international organisations.
Veritaz is a leading IT staffing solutions provider in Sweden, committed to advancing individual careers and aiding employers in ensuring the perfect talent fit. With a proven track record of successful partnerships with top companies, we have rapidly grown our presence in the USA, Europe, and Sweden as a dependable and trusted resource within the IT industry.
Job Overview
Assignment Description
We are looking for an experienced Senior Information Security / GRC Consultant for an interim assignment. The consultant will strengthen and improve information security governance, supplier risk management and compliance while the organisation recruits a permanent Information Security Compliance Manager.
This is an operational, business-oriented role focused on governance, risk, compliance and supplier security — not primarily technical cybersecurity.
What You Will Work On
- Implement a tool for managing information security risks related to suppliers.
- Conduct and improve security assessments of new and existing suppliers.
- Ensure information security requirements are included in supplier agreements.
- Review security appendices and contractual requirements.
- Develop and improve Third Party Risk Management (TPRM) processes.
- Support information security governance, risk management and compliance.
- Document processes and prepare a structured handover to the permanent employee.
What You Bring
- Strong experience in information security, GRC and risk management.
- Experience with Third Party Risk Management (TPRM) and supplier assessments.
- Good knowledge of ISO 27001 and established information security frameworks.
- Experience conducting information security assessments and risk analyses.
- Experience defining security requirements in contracts, procurement and supplier relationships.
- Ability to independently drive improvements and implement processes and tools.
- Strong communication and stakeholder management skills.
Meritorious
- Knowledge of NIS2 and related regulatory requirements.
- Previous experience as an Information Security Manager, GRC Consultant or Third Party Risk Manager.
- Experience implementing supplier risk management tools.
- Experience from interim assignments in large international organisations.