Third Party Cyber Risk Lead
We are seeking an experienced Third Party Cyber Risk Lead to develop and oversee a robust approach to managing cyber security risks across suppliers, partners and other external service providers. This role will play a key part in strengthening organisational resilience by ensuring that third parties are appropriately assessed, monitored and managed throughout the supplier lifecycle.
You will establish and maintain the third-party cyber risk management framework, including policies, standards, processes and risk assessment methodologies. Working closely with procurement, legal, technology, information security and business stakeholders, you will provide expert guidance during supplier selection, onboarding, contract renewal and exit activities. Your responsibilities will include leading risk assessments, reviewing security questionnaires and independent assurance reports, identifying control gaps, agreeing remediation plans and escalating material risks where necessary. You will also define risk-based requirements for suppliers, support contract negotiations and ensure that appropriate security clauses, audit rights and incident notification provisions are included.
The successful candidate will maintain accurate risk registers and management information, producing clear reporting for senior stakeholders and relevant governance forums. You will monitor emerging threats, regulatory expectations and changes in the external supplier landscape, using these insights to improve oversight and prioritise assurance activity. Experience of third-party or supply-chain cyber risk management within a complex environment is essential, along with a strong understanding of information security controls, risk management principles and recognised frameworks such as ISO 27001, NIST or equivalent. You should be confident influencing stakeholders at all levels, challenging constructively and translating technical risk into clear business language. Relevant professional qualifications, such as CISSP, CISM, CRISC or a recognised supplier risk certification, would be advantageous.
Third Party Cyber Risk Lead
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Data Security Lead
- Data Protection Officer (Fract...
- UKI - Technology Risk - Direct...
- Principal Security Architect (...
- Cybersecurity - Manager
- Senior Specialist Field Engine...
- Product Support, IT & Security...
- NOC ENGINEER T1 - T2 - Network...
- Staff Security Architect
- Cryptographic Cyber Security E...
- Security Engineer
- Senior Application Security En...