Information Security Analyst

🔐 Information Security Analyst (Focus on TPRM)

📍 Romania (Remote)

📄 12-Month Rolling B2B Contract

💰 12,000–14,000 RON/month

🇷🇴 Romanian Citizens Only

A growing specialist security consultancy is looking for an Information Security Analyst with a strong interest in Third-Party Risk Management (TPRM) to support supplier security and compliance assessments across regulated environments.

This is a remote-first role offering structured exposure to TPRM within an expert-led team.

🎯 The Role

• Perform third-party (supplier) security assessments
• Review security due diligence (ISO 27001, SOC 2, pen tests, BC/DR, GDPR controls)
• Identify control gaps and draft clear risk findings
• Support supplier interviews and remediation tracking
• Contribute to ongoing monitoring and risk reporting
• Align supplier risk reviews with regulatory requirements

✅ What We’re Looking For

Experience

• 2+ years in Information Security, IT Audit, Security Operations, or Security Consultancy
• Exposure to supplier/vendor risk reviews, audits, or compliance assessments
• Practical awareness of TPRM concepts and supplier lifecycle risk

Strong understanding of security frameworks such as:

• ISO 27001 / 27002
• SOC 2
• NIST CSF
• CIS Controls

Desirable regulatory knowledge:

• DORA
• NIS2
• EU AI Act
• Cyber Resilience Act
• GDPR

🧠 Key Skills

• Solid understanding of security controls (IAM, vulnerability management, incident response, cloud security, logging/monitoring)
• Analytical mindset with structured risk assessment capability
• Strong written communication for risk reporting
• Comfortable working in a remote environment

🚀 Why Join?

• Work within a specialist security consultancy environment, with access and the opportunity to learn from highly experienced Security professionals
• Structured development in Third-Party Risk Management
• Exposure to regulated sectors and evolving EU regulations
• Clear progression and visible impact

If you’re a Romania-based security professional looking to specialise in TPRM and security frameworks, feel free to apply or message directly.