Third Party Cyber Risk Lead
We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks arising from suppliers, partners and other external service providers. This role will lead the development and delivery of a robust third-party cyber risk management framework, ensuring that external relationships are assessed consistently and managed in line with relevant security standards, regulatory expectations and internal risk appetite.
You will oversee the end-to-end assessment lifecycle, from initial due diligence and inherent risk profiling through to control validation, remediation tracking and ongoing monitoring. Working closely with procurement, legal, technology, information security and business stakeholders, you will provide clear, practical advice on supplier risks and support informed decisions throughout the engagement lifecycle. Responsibilities will include maintaining risk and assessment records, reviewing independent assurance reports and security questionnaires, challenging responses where appropriate, escalating material concerns and producing meaningful management information for senior stakeholders and governance forums.
The successful candidate will have significant experience in third-party cyber security, supplier assurance, technology risk or a closely related discipline, ideally within a complex or regulated environment. You will have a strong understanding of security frameworks and controls, such as ISO 27001, NIST, CIS or equivalent, together with experience assessing cloud, software and outsourced service providers. Excellent analytical, communication and influencing skills are essential, as is the ability to translate technical risks into clear business language and drive remediation across multiple stakeholders. Relevant professional qualifications, such as CISA, CRISC, CISSP or a recognised third-party risk certification, would be advantageous. This is an opportunity to shape a mature cyber risk capability and make a visible contribution to the organisation’s resilience and security posture.
Third Party Cyber Risk Lead
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Data Security Lead
- Data Protection Officer (Fract...
- UKI - Technology Risk - Direct...
- Principal Security Architect (...
- Cybersecurity - Manager
- Senior Specialist Field Engine...
- Product Support, IT & Security...
- NOC ENGINEER T1 - T2 - Network...
- Staff Security Architect
- Cryptographic Cyber Security E...
- Security Engineer
- Senior Application Security En...