At Hays, we are partnering with an international business group and global leader in claims & repair management, known for its strong focus on automation, AI‐powered solutions and digitalised operations. As part of a multi‐year programme to strengthen Third‐Party Risk Management (TPRM), Governance and Compliance, we are hiring two key roles:
A TPRM Risk Manager Specialist and a TPRM Lifecycle Specialist. Both based in Spain (Remote / Hybrid). If you believe that you match the requirements of any of them, please apply to this offer so we can tell you more:
* TPRM RISK MANAGER SPECIALIST:
Responsibilities
* Lead and oversee the full TPRM lifecycle and assure quality of Coordinator/Junior work.
* Conduct concentration risk assessments for third‐party providers.
* Support Business Owners with risk mitigation and decision‐making.
* Ensure regulatory compliance (incl. DORA, outsourcing guidelines).
* Define monitoring mechanisms aligned with Group standards and Non‐Financial Risk.
* Drive TPRM system implementation and process optimisation.
* Establish reporting frameworks, KPIs and monitoring structures.
* Deliver TPRM & ICT security training.
* Act as a TPRM subject matter expert.
Requirements
* Degree in Business, Law, IT, Risk, Compliance or similar.
* Proven experience in TPRM, Vendor Risk, Compliance, Security or Risk Analysis.
* Knowledge of DORA and outsourcing regs.
* Strong risk assessment, mitigation and SLA/contract management skills.
* Excellent stakeholder communication; ability to simplify complex risk topics.
* Leadership experience.
* Experience with TPRM/GRC tools valued.
* Fluent English; other languages a plus.
2. TPRM LIFECYCLE SPECIALIST:
Responsibilities
* Support the end‐to‐end TPRM lifecycle (onboarding → offboarding).
* Perform risk assessments, due diligence and vendor reviews.
* Maintain TPRM tools, documentation and risk databases.
* Monitor compliance with DORA, NIS2, ISO 27001.
* Track certifications, deadlines and remediation tasks.
* Collaborate with Procurement, Legal, IT Security, Data Privacy and Compliance.
* Support process improvement and TPRM maturity.
Requirements
* Degree in Business, Law, IT, Risk, Compliance or equivalent experience.
* First experience or internships in Vendor Management, Compliance, Security or Risk.
* Strong interest in TPRM and information security.
* Excellent communication, high attention to detail.
* MS Office proficiency; TPRM/GRC tool experience valued.
* Fluent English; other languages a plus.
What's offered (both roles)
* A freelance contract with Hays.
* Remote / Hybrid work model.
* International team and environment.
* Opportunity to shape a global TPRM framework.
* Flexible working arrangements.
We are looking for professionals like you, passionate about technology, and eager to take on a new challenge. If this aligns with you, apply for the position so we can share more details with you!