Third-Party Risk Management Specialist - Human Rights & Environment

At HEINEKEN Kraków (HEINEKEN Global Shared Services) our success comes directly from our great people. We are a growing team of business experts in finance, accounting, data and technology ready to „WOW” the world with our expertise, passion and pride to be GREEN. We act on our values of Passion for consumers & customers, Courage to dream & pioneer, Care for people & planet, Enjoyment of Life, always focused on being ourselves: inclusive, diverse, and open for new challenges.
 

At HEINEKEN, we are committed to ensuring ethical and sustainable practices across our value chain.
As a TPRM (Third Party Risk Management) Specialist for Human Rights & Environmental Risk, you will play a critical role in identifying and mitigating regulatory and reputational risks related to human rights and environmental standards across our third-party landscape. Acting as the first line of defence, you’ll partner with procurement teams, risk functions, and external vendors to support HEINEKEN’s global commitment to responsible sourcing and compliance.

Your responsibilities would include:

• evaluating risk screening findings from the Prewave system to identify potential HR&E risks and assess their severity and likelihood
• developing and administering comprehensive mitigation plans tailored to specific third-party risk profiles
• distributing approved mitigation plans and communicating clear execution guidelines to internal and external stakeholders
• monitoring compliance and the effectiveness of mitigation actions, adjusting plans where needed
• identifying, documenting, and analysing HR&E-related issues in vendor operations to ensure alignment with our risk standards
• escalating non-mitigatable compliance risks to senior stakeholders and supporting prompt resolution
• tracking vendor performance against HR&E key risk indicators and validating due diligence scores
• preparing and sharing regular monitoring reports, including key risk findings and insights
• collaborating closely with HGP/OpCo Procurement, HR&E Risk Specialists, and the TPRM 2nd line of defence
• training procurement and relevant teams on HR&E risk mitigation practices and tools
• continuously improving risk assessment processes in line with regulatory changes and best practices
   

You are a good match if you have:

• at least 5 years of experience in risk management, vendor management, or a related field
• a bachelor’s degree in Business Administration, Risk Management, Social Science, Environmental Studies, or a related area
• strong working knowledge of human rights and environmental risk topics and third-party risk frameworks
• the ability to independently evaluate, document, and manage complex risk situations
• excellent communication, stakeholder management, and problem-solving skills
• proven experience in cross-functional collaboration and influencing without direct authority
• fluency in English
   

You are a perfect match if you also have:
 

• experience in Human Rights and Environmental risk assessment and compliance
• knowledge of any of these languages : Portuguese/Spanish/French
• knowledge of Value Chain Due Diligence or Corporate Sustainability Due Diligence Directive (CSDDD)
• project management certification
• previous exposure to working with third-party screening platforms such as Prewave or similar tools
  
  At HEINEKEN Kraków, we take integrity and ethical conduct seriously. If someone has concerns about a possible violation of legal regulations indicated in Polish Whistleblowing Act or our Code of Business Conduct, we encourage them to speak up. Cases can be reported to global team or locally (in line with the local HGSS Whistleblowing procedure) by selecting proper option in this tool or by communicating it on hotline.