# Cyber ISRA & Vendor Risk Assessment Consultant (PRCI1126)-Client Services

> PRIORITY Quality Consultants · Athens, Greece (Hybrid) · Full-time · Posted 2026-11-10

**Workplace:** hybrid

## Description

PRIORITY Quality Consultants is seeking **Cyber ISRA & Vendor Risk Assessment Consultants** on behalf of one of our clients, a leading organization in the **Banking Sector**, for a **12-month contract with the possibility of renewal**.

The successful candidates will be involved in cybersecurity risk management and regulatory compliance projects, focusing on information security risk assessments, third-party risk management, and the implementation of recognized security frameworks.

### Responsibilities:

-   Conduct Information Security Risk Assessments (ISRA), identifying threats, vulnerabilities, and potential business impacts.
-   Assess information security controls against ISO/IEC 27001, ISO/IEC 27002, and NIST CSF.
-   Perform third-party and vendor security risk assessments, including due diligence and periodic reviews.
-   Support compliance with regulatory requirements, including DORA, NIS2, GDPR, and relevant EBA guidelines.
-   Review security questionnaires, certifications, audit reports, and supporting documentation.
-   Maintain risk registers and support ICT third-party risk management activities.
-   Identify security gaps, recommend mitigation measures, and monitor remediation activities.
-   Collaborate with IT teams, business stakeholders, and external service providers.
-   Prepare risk assessment reports and present findings and recommendations.

## Requirements

-   Bachelor's degree in Computer Science, Information Security, IT, or a related field.
-   **3–5 years of experience** in Information Security Risk Management, IT Risk, IT Audit, Cybersecurity GRC, or Third-Party Risk Management.
-   Knowledge of ISO/IEC 27001, NIST CSF, and information security risk assessment methodologies.
-   Familiarity with DORA, NIS2, GDPR, and relevant financial sector regulations.
-   Understanding of IT infrastructure, cloud security, network security, and IAM.
-   Strong analytical, reporting, and stakeholder management skills.
-   Excellent command of Greek and English.

### Nice to Have

-   Previous experience in banking, financial services, or consulting.
-   Experience in vendor risk assessments and ICT third-party risk management.
-   Familiarity with ISO/IEC 27005 and NIST SP 800-30.
-   Certifications such as ISO 27001 Lead Auditor/Implementer, CISA, CRISC, or CTPRP.

## Benefits

**What we offer:**

-   Opportunity to contribute to cybersecurity and regulatory compliance projects within the banking sector.
-   Exposure to complex financial services environments and evolving regulatory frameworks.
-   Collaboration with experienced cybersecurity professionals.
-   Hybrid working model in Athens.
-   12-month contract with potential for renewal.

## Apply

[Apply at PRIORITY Quality Consultants](https://apply.workable.com/priorityquality/j/F92F89E02B/apply)

---
Powered by [Workable](https://www.workable.com)