Third Party Cyber Risk Lead

Reference: crxe4lq8kdwvzglrhp9i

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of information and cyber security risks across an organisation’s supplier and partner ecosystem. This is a key role within the wider risk function, responsible for ensuring that third parties are assessed, monitored and managed consistently throughout the relationship lifecycle. You will provide expert guidance to procurement, technology, legal, compliance and business teams, helping them make informed decisions about supplier security and resilience.

Your responsibilities will include developing and maintaining the third-party cyber risk management framework, policies, standards and procedures. You will lead or oversee security due diligence for new and existing suppliers, reviewing assessments, certifications, audit reports, contractual controls and remediation plans. You will identify and evaluate risks associated with critical and high-risk suppliers, maintain accurate risk records, and provide clear recommendations to stakeholders and senior management. You will also establish appropriate monitoring arrangements, track control effectiveness, challenge exceptions and ensure that agreed actions are completed within defined timescales.

The successful candidate will have substantial experience in third-party risk, supplier assurance, cyber security, information security or a closely related discipline. You will be confident interpreting technical and governance evidence, including ISO 27001, SOC reports, penetration testing results, business continuity arrangements and data protection requirements. Strong knowledge of recognised security and risk frameworks, such as NIST, CIS or ISO standards, would be advantageous. Excellent communication and influencing skills are essential, as you will need to translate complex cyber risks into clear, practical business advice and build effective relationships at all levels. A proactive, analytical and collaborative approach is required, together with the ability to manage competing priorities and work independently. Relevant professional qualifications in cyber security, information risk, audit or supplier management would be welcomed.

£60,700.00 - £83,000.00
Per annum
Added 16/10/2026
Reference: crxe4lq8kdwvzglrhp9i

Other similar jobs

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks arising from suppliers, partners and other external service providers. This role will lead the development and delivery of a robust third-party cyber risk management framework, ensuring that external relationships are assessed consistently and managed in line with relevant security standards, regulatory expectations and internal risk appetite. You will oversee the end-to-end assessment lifecycle, from initial due diligence and inherent risk profiling through to control validation, remediation tracking and ongoing monitoring. Working closely with procurement, legal, technology, information security and business stakeholders, you...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to develop and oversee a robust approach to managing cyber security risks across suppliers, partners and other external service providers. This role will play a key part in strengthening organisational resilience by ensuring that third parties are appropriately assessed, monitored and managed throughout the supplier lifecycle. You will establish and maintain the third-party cyber risk management framework, including policies, standards, processes and risk assessment methodologies. Working closely with procurement, legal, technology, information security and business stakeholders, you will provide expert guidance during supplier selection, onboarding, contract renewal and exit activities....

Learn more

Data Security Assurance Lead

Added 01/09/2026

We are seeking an experienced Data Security Assurance Lead to strengthen the organisation’s approach to information security, data protection and technology risk. In this role, you will lead assurance activities across data environments, applications, infrastructure and third-party services, providing clear and practical insight into the effectiveness of security controls. You will work closely with technology, privacy, risk, compliance and business stakeholders to identify vulnerabilities, assess control maturity and support the delivery of sustainable improvements. Key responsibilities will include developing and maintaining a risk-based data security assurance plan; leading control reviews, risk assessments and security audits; assessing compliance with relevant legal,...

Learn more

Data Security Assurance Lead

Added 01/09/2026

We are seeking an experienced Data Security Assurance Lead to strengthen the organisation’s approach to information security, data protection and technology risk. This role will provide independent challenge and practical guidance across business and technology teams, helping to ensure that data is managed securely throughout its lifecycle and that appropriate controls are designed, implemented and maintained. You will work closely with stakeholders at all levels to promote a strong security culture and support the delivery of resilient, compliant services. Key responsibilities will include developing and maintaining data security assurance frameworks, policies, standards and control requirements; planning and delivering risk-based assurance...

Learn more

Data Security Assurance Lead

Added 01/09/2026

We are seeking an experienced Data Security Assurance Lead to strengthen the organisation’s approach to data protection, information security, and regulatory assurance. In this role, you will lead the development and delivery of data security assurance activities across business functions, technology environments, and third-party relationships. You will provide constructive challenge, identify areas of risk, and help ensure that sensitive information is managed securely throughout its lifecycle. Key responsibilities will include maintaining and enhancing the data security assurance framework; planning and conducting risk-based reviews, control assessments, and compliance audits; and monitoring remediation activity to ensure issues are addressed within agreed timescales....

Learn more

Head of Department, Cyber & Information Resilience

Added 08/10/2026

We are seeking an experienced Head of Department, Cyber & Information Resilience to lead the development and delivery of a robust, organisation-wide approach to cybersecurity, information protection, operational resilience and business continuity. This senior role will provide strategic direction, assurance and expert advice to senior leadership, ensuring that critical services, information assets and technology environments remain secure, resilient and capable of withstanding evolving threats and disruption. You will lead a multidisciplinary team and oversee the cybersecurity and information resilience framework, including governance, risk management, security architecture, identity and access management, vulnerability management, incident response, disaster recovery and continuity planning. You...

Learn more

Head of Department, Cyber & Information Resilience

Added 08/10/2026

We are seeking an experienced and forward-thinking Head of Department, Cyber & Information Resilience to lead the development and delivery of a robust cyber security, information resilience and technology risk capability. This is a senior leadership role with responsibility for protecting critical services, information assets and operational environments against an evolving threat landscape. You will provide strategic direction, expert advice and effective oversight across cyber security, business continuity, disaster recovery, information assurance and operational resilience. You will lead a multidisciplinary team, set clear priorities and ensure that security and resilience are embedded into organisational strategy, transformation programmes and day-to-day operations....

Learn more

Head of Department, Cyber & Information Resilience

Added 08/10/2026

We are seeking an experienced Head of Department, Cyber & Information Resilience to lead the development and delivery of a comprehensive cyber security, information resilience and operational continuity capability. This senior role will provide strategic direction across cyber risk management, information assurance, technology resilience, incident response and business continuity, ensuring that critical services, data and infrastructure remain secure and available in a constantly evolving threat landscape. You will lead a multidisciplinary team and establish clear governance, policies, standards and assurance frameworks aligned with relevant regulatory obligations and recognised industry practices. Responsibilities will include identifying and managing cyber and information risks;...

Learn more

Manager - CCDI (Centre for Cyber Defence & Intelligence)

Added 07/10/2026

We are seeking an experienced and motivated Manager to lead a Centre for Cyber Defence & Intelligence (CCDI). This role will provide strategic and operational leadership across cyber defence, threat intelligence, incident response, vulnerability management and security monitoring. The successful candidate will help strengthen organisational resilience by developing effective cyber security capabilities, improving security maturity and ensuring that risks are identified, assessed and managed appropriately. Key responsibilities will include setting the centre’s direction, priorities and operating procedures; managing and mentoring a multidisciplinary cyber security team; coordinating the detection, investigation and response to cyber incidents; and overseeing the collection, analysis and...

Learn more

Manager - CCDI (Centre for Cyber Defence & Intelligence)

Added 07/10/2026

We are seeking an experienced Manager to lead a Centre for Cyber Defence & Intelligence function and strengthen organisational resilience against evolving cyber threats. This role will provide strategic and operational leadership across cyber defence, threat intelligence, incident response, vulnerability management and security monitoring. You will establish priorities, manage resources and ensure that cyber security capabilities support wider business objectives, regulatory obligations and risk management requirements. Key responsibilities include developing and implementing cyber defence and intelligence strategies; overseeing the identification, assessment and mitigation of cyber risks; coordinating responses to security incidents; and ensuring timely escalation, investigation and remediation of threats....

Learn more

Manager - CCDI (Centre for Cyber Defence & Intelligence)

Added 07/10/2026

We are seeking an experienced and motivated Manager to lead a Centre for Cyber Defence & Intelligence (CCDI). This role will provide strategic and operational leadership across cyber defence, threat intelligence, security monitoring, incident response and cyber risk management. You will be responsible for developing and delivering a coordinated cyber security programme that protects critical systems, information and services while supporting organisational priorities and regulatory obligations. Key responsibilities will include leading a multidisciplinary team of cyber security professionals; setting operational standards, procedures and performance measures; overseeing security operations, vulnerability management, threat hunting and incident response; and ensuring effective detection, investigation,...

Learn more

Information Security - Risk Analyst (Third Party Risk)

Added 29/09/2026

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle. Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps,...

Learn more

Third Party Cyber Risk Lead

Added 25/08/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks across a complex supplier and partner ecosystem. In this role, you will develop and oversee a proportionate third-party cyber risk management framework, helping ensure that suppliers meet security expectations throughout the procurement, onboarding, monitoring, renewal and offboarding lifecycle. You will work closely with procurement, legal, information security, technology, risk and business stakeholders to embed effective controls and provide clear, practical advice. Your responsibilities will include conducting and overseeing supplier cyber risk assessments, reviewing security questionnaires and independent assurance reports, identifying control gaps,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.