Senior Information Security & GRC Consultant TPRM (20502)

Veritaz is a leading IT staffing solutions provider in Sweden, committed to advancing individual careers and aiding employers in ensuring the perfect talent fit. With a proven track record of successful partnerships with top companies, we have rapidly grown our presence in the USA, Europe, and Sweden as a dependable and trusted resource within the IT industry.

Job Overview

Assignment Description

We are looking for an experienced Senior Information Security / GRC Consultant for an interim assignment. The consultant will strengthen and improve information security governance, supplier risk management and compliance while the organisation recruits a permanent Information Security Compliance Manager.

This is an operational, business-oriented role focused on governance, risk, compliance and supplier security — not primarily technical cybersecurity.

What You Will Work On

• Implement a tool for managing information security risks related to suppliers.

• Conduct and improve security assessments of new and existing suppliers.

• Ensure information security requirements are included in supplier agreements.

• Review security appendices and contractual requirements.

• Develop and improve Third Party Risk Management (TPRM) processes.

• Support information security governance, risk management and compliance.

• Document processes and prepare a structured handover to the permanent employee.

What You Bring

• Strong experience in information security, GRC and risk management.

• Experience with Third Party Risk Management (TPRM) and supplier assessments.

• Good knowledge of ISO 27001 and established information security frameworks.

• Experience conducting information security assessments and risk analyses.

• Experience defining security requirements in contracts, procurement and supplier relationships.

• Ability to independently drive improvements and implement processes and tools.

• Strong communication and stakeholder management skills.

Meritorious

• Knowledge of NIS2 and related regulatory requirements.

• Previous experience as an Information Security Manager, GRC Consultant or Third Party Risk Manager.

• Experience implementing supplier risk management tools.

• Experience from interim assignments in large international organisations.