responsibilities :

Manage the vendor due diligence process using OneTrust
Review and analyze third-party responses, including SOC 1 / SOC 2 reports and ISO 27001/27002 certifications
Identify potential compliance, IT security, and data privacy risks in supplier relationships
Work closely with global procurement, legal, IT security, and operational teams to assess vendor risks
Ensure accurate documentation and record-keeping within OneTrust
Follow up on outstanding vendor information and ensure timely completion of assessments
Monitor and support continuous improvements in third-party risk management processes
Stay up to date on global compliance requirements (e.g., GDPR, IT security frameworks)
Assist in compliance training and awareness efforts across the organization

requirements-expected :

Professional experience in compliance, third-party risk management, procurement, or IT audit
Hands-on knowledge of SOC reports (SOC 1 / SOC 2) and ISO 27001 / 27002 standards, ISAE 3402/3000 reports and various certifications.
Familiarity with OneTrust or similar third-party risk management platforms
Understanding of vendor risk assessment processes, IT controls, and regulatory frameworks
Strong attention to detail and analytical skills in reviewing complex documentation
Excellent communication skills to work with global teams and vendors
Ability to prioritize, manage deadlines, and work independently in a fast-paced international setting

offered :

benefits :

requirements-expected :