Cyber ISRA & Vendor Risk Assessment Consultant (PRCI1126)-Client Services

PRIORITY Quality Consultants is seeking Cyber ISRA & Vendor Risk Assessment Consultants on behalf of one of our clients, a leading organization in the Banking Sector, for a 12-month contract with the possibility of renewal.

The successful candidates will be involved in cybersecurity risk management and regulatory compliance projects, focusing on information security risk assessments, third-party risk management, and the implementation of recognized security frameworks.

Responsibilities:

• Conduct Information Security Risk Assessments (ISRA), identifying threats, vulnerabilities, and potential business impacts.
• Assess information security controls against ISO/IEC 27001, ISO/IEC 27002, and NIST CSF.
• Perform third-party and vendor security risk assessments, including due diligence and periodic reviews.
• Support compliance with regulatory requirements, including DORA, NIS2, GDPR, and relevant EBA guidelines.
• Review security questionnaires, certifications, audit reports, and supporting documentation.
• Maintain risk registers and support ICT third-party risk management activities.
• Identify security gaps, recommend mitigation measures, and monitor remediation activities.
• Collaborate with IT teams, business stakeholders, and external service providers.
• Prepare risk assessment reports and present findings and recommendations.

Requirements

• Bachelor's degree in Computer Science, Information Security, IT, or a related field.
• 3–5 years of experience in Information Security Risk Management, IT Risk, IT Audit, Cybersecurity GRC, or Third-Party Risk Management.
• Knowledge of ISO/IEC 27001, NIST CSF, and information security risk assessment methodologies.
• Familiarity with DORA, NIS2, GDPR, and relevant financial sector regulations.
• Understanding of IT infrastructure, cloud security, network security, and IAM.
• Strong analytical, reporting, and stakeholder management skills.
• Excellent command of Greek and English.

Nice to Have

• Previous experience in banking, financial services, or consulting.
• Experience in vendor risk assessments and ICT third-party risk management.
• Familiarity with ISO/IEC 27005 and NIST SP 800-30.
• Certifications such as ISO 27001 Lead Auditor/Implementer, CISA, CRISC, or CTPRP.

Benefits

What we offer:

• Opportunity to contribute to cybersecurity and regulatory compliance projects within the banking sector.
• Exposure to complex financial services environments and evolving regulatory frameworks.
• Collaboration with experienced cybersecurity professionals.
• Hybrid working model in Athens.
• 12-month contract with potential for renewal.