Regulatory Cyber Assurance Principal

Added 21/10/2026

We are seeking an experienced Regulatory Cyber Assurance Principal to lead the development and delivery of cyber assurance activities across a complex, highly regulated environment. This is a senior role for an individual who can translate regulatory expectations into practical controls, measurable outcomes and clear assurance plans, while providing constructive challenge to technology and business leaders. You will define and maintain the cyber assurance framework, ensuring alignment with relevant legislation, regulatory requirements, industry standards and internal policies. You will oversee risk-based assurance reviews covering areas such as governance, identity and access management, infrastructure security, cloud services, third-party risk, vulnerability management,...

Manager – CCDI (Centre for Cyber Defence & Intelligence)

Added 21/10/2026

An exciting opportunity has arisen for an experienced cyber security professional to lead a specialist Cyber Defence and Intelligence function. This role will provide strategic direction and operational oversight across cyber threat intelligence, security monitoring, incident response and defensive cyber operations. You will help strengthen organisational resilience by identifying emerging threats, assessing risk and translating intelligence into practical security improvements. You will manage and develop a team of cyber security specialists, setting clear objectives, supporting professional development and fostering a collaborative, service-focused culture. Working closely with technical, operational and senior stakeholders, you will ensure that cyber security priorities are understood...

Head of Department, Cyber & Information Resilience

Added 21/10/2026

We are seeking an experienced and strategic Head of Department, Cyber & Information Resilience to lead the development and delivery of a robust cyber security, information assurance and operational resilience capability. This is a senior leadership role, responsible for protecting critical services, information assets and technology environments while enabling the organisation to manage disruption, adapt to emerging threats and recover effectively. You will set the strategic direction for cyber and information resilience, ensuring that policies, frameworks and controls align with regulatory obligations, recognised industry standards and organisational priorities. Leading a multidisciplinary team, you will oversee cyber risk management, security operations,...

Information Security - Risk Analyst (Third Party Risk)

Added 29/09/2026

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle. Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps,...

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of information and cyber security risks across an organisation’s supplier and partner ecosystem. This is a key role within the wider risk function, responsible for ensuring that third parties are assessed, monitored and managed consistently throughout the relationship lifecycle. You will provide expert guidance to procurement, technology, legal, compliance and business teams, helping them make informed decisions about supplier security and resilience. Your responsibilities will include developing and maintaining the third-party cyber risk management framework, policies, standards and procedures. You will lead or oversee security due...

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks arising from suppliers, partners and other external service providers. This role will lead the development and delivery of a robust third-party cyber risk management framework, ensuring that external relationships are assessed consistently and managed in line with relevant security standards, regulatory expectations and internal risk appetite. You will oversee the end-to-end assessment lifecycle, from initial due diligence and inherent risk profiling through to control validation, remediation tracking and ongoing monitoring. Working closely with procurement, legal, technology, information security and business stakeholders, you...

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to develop and oversee a robust approach to managing cyber security risks across suppliers, partners and other external service providers. This role will play a key part in strengthening organisational resilience by ensuring that third parties are appropriately assessed, monitored and managed throughout the supplier lifecycle. You will establish and maintain the third-party cyber risk management framework, including policies, standards, processes and risk assessment methodologies. Working closely with procurement, legal, technology, information security and business stakeholders, you will provide expert guidance during supplier selection, onboarding, contract renewal and exit activities....

Third Party Cyber Risk Lead

Added 25/08/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks across our external supplier and partner ecosystem. In this role, you will lead the development and delivery of a robust third-party cyber risk management programme, helping ensure that suppliers meet required security, resilience, privacy and regulatory standards. You will work closely with procurement, legal, technology, information security, risk and business teams to embed effective controls throughout the supplier lifecycle. Your responsibilities will include defining and maintaining third-party cyber risk policies, standards, procedures and assessment methodologies; conducting risk assessments and due diligence for...

Third Party Cyber Risk Lead

Added 25/08/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks across a complex supplier and partner ecosystem. In this role, you will develop and oversee a proportionate third-party cyber risk management framework, helping ensure that suppliers meet security expectations throughout the procurement, onboarding, monitoring, renewal and offboarding lifecycle. You will work closely with procurement, legal, information security, technology, risk and business stakeholders to embed effective controls and provide clear, practical advice. Your responsibilities will include conducting and overseeing supplier cyber risk assessments, reviewing security questionnaires and independent assurance reports, identifying control gaps,...

Senior Manager, Third Party Risk Management, FS, Extended Enterprise

Added 19/10/2026

We are seeking an experienced Senior Manager to lead third-party risk management across a financial services environment and the wider extended enterprise. This is a strategic role for someone who can strengthen governance, improve resilience and provide clear oversight of suppliers, outsourcing arrangements, strategic partners and other external dependencies. You will work closely with senior stakeholders across procurement, technology, information security, compliance, legal, operational resilience and business functions to ensure third-party relationships are managed in line with regulatory expectations and organisational risk appetite. Your responsibilities will include developing and embedding the third-party risk management framework, policies, standards and procedures; overseeing...

Senior Consultant, Third Party Risk Management, FS, Extended Enterprise

Added 19/10/2026

We are seeking a Senior Consultant to support the delivery of third-party risk management services across the financial services sector. This role will work with clients to understand their extended enterprise, assess risks arising from suppliers and other external relationships, and design practical, proportionate approaches to managing those risks. You will contribute to engagements from initial scoping and risk assessment through to implementation, monitoring and continuous improvement. Responsibilities will include reviewing and enhancing third-party risk management frameworks, policies, processes and controls; conducting supplier due diligence and risk assessments; supporting outsourcing and material third-party assessments; and evaluating arrangements against relevant regulatory...

Third Party Security Due Diligence Lead

Added 09/09/2026

We are seeking a Third Party Security Due Diligence Lead to oversee the assessment and management of information security risks associated with suppliers, partners and other external service providers. In this role, you will lead the end-to-end due diligence process, ensuring that third parties meet defined security, privacy, resilience and compliance requirements before and throughout the relationship lifecycle. You will work closely with procurement, legal, privacy, technology, risk and business stakeholders to provide clear, practical and risk-based recommendations. Your responsibilities will include designing and maintaining third-party security assessment processes, reviewing security questionnaires and supporting evidence, and evaluating controls across areas...

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an Interim Third-Party Cyber Oversight Specialist to provide expert assurance and governance across the organisation’s supplier and outsourcing landscape. This role will focus on assessing and managing cyber security risks arising from third parties, helping to ensure that external providers meet required security, resilience, privacy and regulatory standards. The successful candidate will work closely with procurement, technology, risk, legal and business stakeholders to strengthen oversight practices and support informed risk-based decision-making. Key responsibilities will include reviewing third-party security assessments, due diligence questionnaires, audit reports, penetration testing results, remediation plans and contractual security requirements. You will identify control...

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an experienced Interim Third-Party Cyber Oversight Specialist to strengthen the management and assurance of cyber security risks arising from suppliers, outsourcing arrangements and other external partners. This interim role will provide practical oversight across the third-party lifecycle, helping to ensure that security requirements are clearly defined, assessed and monitored in line with internal policies, regulatory expectations and recognised industry standards. Key responsibilities will include reviewing supplier security assessments, due diligence questionnaires, independent assurance reports and risk evidence; identifying control gaps and documenting associated risks; and recommending appropriate remediation actions or mitigating controls. You will work closely with...

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an Interim Third-Party Cyber Oversight Specialist to strengthen the oversight of suppliers, outsourcing partners and other external service providers. This role will help ensure that third-party relationships meet required cybersecurity, information security, privacy and operational resilience standards. You will assess supplier risk, review control environments and provide practical recommendations to improve the management of external dependencies across the organisation. Key responsibilities will include conducting cyber and information security assessments during supplier onboarding, periodic reviews and significant changes to services. You will analyse security questionnaires, independent assurance reports, penetration-testing summaries, policies, risk registers and remediation plans, identifying gaps...