Third Party Cyber Risk Lead
We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of information and cyber security risks across an organisation’s supplier and partner ecosystem. This is a key role within the wider risk function, responsible for ensuring that third parties are assessed, monitored and managed consistently throughout the relationship lifecycle. You will provide expert guidance to procurement, technology, legal, compliance and business teams, helping them make informed decisions about supplier security and resilience.
Your responsibilities will include developing and maintaining the third-party cyber risk management framework, policies, standards and procedures. You will lead or oversee security due diligence for new and existing suppliers, reviewing assessments, certifications, audit reports, contractual controls and remediation plans. You will identify and evaluate risks associated with critical and high-risk suppliers, maintain accurate risk records, and provide clear recommendations to stakeholders and senior management. You will also establish appropriate monitoring arrangements, track control effectiveness, challenge exceptions and ensure that agreed actions are completed within defined timescales.
The successful candidate will have substantial experience in third-party risk, supplier assurance, cyber security, information security or a closely related discipline. You will be confident interpreting technical and governance evidence, including ISO 27001, SOC reports, penetration testing results, business continuity arrangements and data protection requirements. Strong knowledge of recognised security and risk frameworks, such as NIST, CIS or ISO standards, would be advantageous. Excellent communication and influencing skills are essential, as you will need to translate complex cyber risks into clear, practical business advice and build effective relationships at all levels. A proactive, analytical and collaborative approach is required, together with the ability to manage competing priorities and work independently. Relevant professional qualifications in cyber security, information risk, audit or supplier management would be welcomed.
Third Party Cyber Risk Lead
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Data Security Lead
- Data Protection Officer (Fract...
- UKI - Technology Risk - Direct...
- Principal Security Architect (...
- Cybersecurity - Manager
- Senior Specialist Field Engine...
- Product Support, IT & Security...
- NOC ENGINEER T1 - T2 - Network...
- Staff Security Architect
- Cryptographic Cyber Security E...
- Security Engineer
- Senior Application Security En...