Senior Information Security & GRC Consultant TPRM (20502)

Veritaz is a leading IT staffing solutions provider in Sweden, committed to advancing individual careers and aiding employers in ensuring the perfect talent fit. With a proven track record of successful partnerships with top companies, we have rapidly grown our presence in the USA, Europe, and Sweden as a dependable and trusted resource within the IT industry.

Job Overview

Assignment Description

We are looking for an experienced Senior Information Security / GRC Consultant for an interim assignment. The consultant will strengthen and improve information security governance, supplier risk management and compliance while the organisation recruits a permanent Information Security Compliance Manager.

This is an operational, business-oriented role focused on governance, risk, compliance and supplier security — not primarily technical cybersecurity.

What You Will Work On

Implement a tool for managing information security risks related to suppliers.

Conduct and improve security assessments of new and existing suppliers.

Ensure information security requirements are included in supplier agreements.

Review security appendices and contractual requirements.

Develop and improve Third Party Risk Management (TPRM) processes.

Support information security governance, risk management and compliance.

Document processes and prepare a structured handover to the permanent employee.

What You Bring

Strong experience in information security, GRC and risk management.

Experience with Third Party Risk Management (TPRM) and supplier assessments.

Good knowledge of ISO 27001 and established information security frameworks.

Experience conducting information security assessments and risk analyses.

Experience defining security requirements in contracts, procurement and supplier relationships.

Ability to independently drive improvements and implement processes and tools.

Strong communication and stakeholder management skills.

Meritorious

Knowledge of NIS2 and related regulatory requirements.

Previous experience as an Information Security Manager, GRC Consultant or Third Party Risk Manager.

Experience implementing supplier risk management tools.

Experience from interim assignments in large international organisations.