Cyber ISRA & Vendor Risk Assessment Consultant

About the role

Quality Consultants is recruiting Cyber ISRA and Vendor Risk Assessment Consultants on behalf of a leading banking-sector client. This is a 12-month contract with the possibility of renewal, based in Athens under a hybrid working model. The role covers cybersecurity risk management and regulatory compliance projects, including information security risk assessments, third-party risk management and the implementation of recognised security frameworks.

Key responsibilities

• Conduct Information Security Risk Assessments (ISRA), identifying threats, vulnerabilities and potential business impacts.
• Assess information security controls against ISO/IEC 27001, ISO/IEC 27002 and NIST CSF.
• Perform third-party and vendor security risk assessments, including due diligence and periodic reviews.
• Support compliance with DORA, NIS2, GDPR and relevant EBA guidelines.
• Review security questionnaires, certifications, audit reports and supporting documentation.
• Maintain risk registers and support ICT third-party risk management activities.
• Identify security gaps, recommend mitigations and monitor remediation.
• Collaborate with IT teams, business stakeholders and external service providers.
• Prepare risk assessment reports and present findings and recommendations.

Required profile

• Bachelor's degree in Computer Science, Information Security, IT or a related field.
• 3-5 years of experience in Information Security Risk Management, IT Risk, IT Audit, Cybersecurity GRC or Third-Party Risk Management.
• Familiarity with DORA, NIS2, GDPR and financial sector regulations.
• Excellent command of Greek and English.
• Nice to have: banking, financial services or consulting experience; vendor risk assessment experience; ISO 27005 and NIST SP 800-30 familiarity; ISO 27001 Lead Auditor/Implementer, CISA, CRISC or CTPRP certification.

Required skills

• Knowledge of ISO/IEC 27001, NIST CSF and information security risk assessment methodologies.
• Understanding of IT infrastructure, cloud security, network security and IAM.
• Strong analytical, reporting and stakeholder management skills.

What we offer

• Opportunity to work on cybersecurity and regulatory compliance projects in the banking sector.
• Exposure to complex financial services environments and evolving regulatory frameworks.
• Collaboration with experienced cybersecurity professionals.
• Hybrid working model in Athens.