afarax is looking for a freelance IT Risk Manager. We need you!

The project:

Our client in the Transportation, Logistics, Supply Chain and Storage sector, is seeking an experienced IT Risk Manager to strengthen their team.

Responsibilities

IT Risk Management

- Maintain and continuously improve the enterprise IT Risk Management framework.
- Perform and facilitate IT Risk Assessments with Business and IT stakeholders.
- Maintain the IT Risk Register and monitor risk exposure.
- Define, monitor and follow up risk treatment plans.
- Support risk acceptance and escalation processes.

Governance & Policy Management

- Develop, review and maintain IT Security policies, standards, procedures and guidelines.
- Ensure governance documentation remains aligned with Group requirements and regulatory obligations.
- Contribute to the evolution of the GRC framework.

Control Framework

- Maintain and continuously improve the IT Control Catalogue.
- Ensure controls are properly designed, documented and monitored.
- Coordinate periodic control reviews.
- Support the implementation of risk-based controls.

Third Party Risk Management

- Coordinate IT supplier risk assessments.
- Support Procurement and Business teams regarding security requirements.




- Monitor third-party remediation plans.
- Ensure suppliers comply with internal security requirements.

Audit & Compliance

- Coordinate internal and external audit requests.
- Follow-up audit recommendations until closure.
- Produce audit evidence.
- Monitor remediation actions and implementation progress.

Reporting

- Produce risk dashboards and executive reporting.
- Monitor KPIs and KRIs.
- Present risk exposure to governance committees.
- Support management decision-making.

Is this you?

- 5+ years in IT Risk Management or Information Security Governance.
- Strong knowledge of ISO 27001, ISO 27005, NIST or COBIT.
- Experience with IT Risk Assessment methodologies.
- Experience with IT Control Frameworks.
- Experience with Third Party Risk Management.
- Experience coordinating audits.
- Excellent stakeholder management.
- Strong analytical and reporting skills.

How afarax supports you?

- You benefit from our extensive network
- You will have access to projects that fit your expertise
- We help and support you throughout your project
- We offer the possibility to build a valuable and lasting partnership

Check out more projects on:

📌 It risk manager (España)
🏢 afarax
📍 España