Senior Analyst, Third Party Risk Management

Digital Realty

Dublin, Ireland

Full Time

Posted October 9, 2026

Apply Now

Application opens on company website

Listing evidence and provenance

Source: Oracle Cloud HCM View original listing
Freshness: Open in the current public read path; this is not an employer guarantee.Last observed October 10, 2026
Classification: Modern power-system classification not yet published for this listing.Legacy source industry field: Not Specified
Pay provenance: Pay not available

Job Description

Digital Realty is a leading provider of carrier- and cloud-neutral data centre services.

Key Responsibilities

Join our Information Security team and help us understand and manage the cybersecurity risks associated with our suppliers and service providers.
You will lead security reviews, monitor third-party risks, and work with teams across the business to turn technical findings into practical actions. As our first dedicated Third-Party Risk Management hire in EMEA, you will have the opportunity to help shape how we develop this important capability across the region.
Lead cybersecurity reviews of new suppliers and services, considering the data they access, the systems they connect to, and their importance to our business.
Review supplier questionnaires and security documentation, including SOC 2 reports, ISO 27001 certifications, penetration test summaries, and business continuity plans.
Identify security gaps and explain the potential business impact in clear, straightforward language.
Recommend practical actions to reduce risk and support suppliers in addressing outstanding security concerns.
Partner with Procurement, Legal, Privacy, Information Security, and business teams throughout the supplier lifecycle.
Monitor existing suppliers for emerging risks, security incidents, control changes, and other warning signs.
Carry out regular supplier reassessments based on risk level, business criticality, regulatory requirements, and changes to services.
Maintain accurate records and provide clear reporting on assessments, risk ratings, remediation actions, and overdue reviews
Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Business, or a related field, or equivalent practical experience is preferred
At least 3 years of experience in cybersecurity, third-party risk management, IT audit, security compliance, vendor assurance, or a related area.
Practical experience assessing the cybersecurity controls of suppliers or service providers, ideally within a large or complex organisation.
Familiarity with standards and frameworks such as SOC 2, ISO 27001, PCI DSS, NIS2, DORA, or NIST.
Experience using a Third-Party Risk Management or GRC platform, such as OneTrust, ProcessUnity, or a similar tool.
The ability to review security evidence, identify gaps, and reach balanced, risk-based conclusions.
Strong communication skills, with the ability to make technical information clear and relevant to different audiences.
Good organisational skills and the ability to manage several reviews and priorities at the same time.
Professional certifications such as CISA, CRISC, CISSP, CTPRP, or Security+ are welcome but not essential.
You do not need to meet every preferred qualification to apply. If your experience is relevant and you are interested in developing your career in third-party cybersecurity risk, we would like to hear from you.

Benefits & Perks

An open-door culture with short communication paths and flat hierarchies.
A personalised onboarding plan, including a buddy system and education programmes.
Personal development opportunities in a fast-growing, international environment.
Attractive social benefits, including flexible working hours, digital meal vouchers, bike leasing, and a pension plan.
Additional benefits such as free drinks, fresh fruit, and team events.
The opportunity to become the first dedicated Third-Party Risk Management team member in EMEA and contribute to the future development of the function.