Job Search

We are seeking a Security Consultant (Supply Chain) to help organisations identify, assess and reduce cyber and information security risks across their third-party and supplier ecosystems. You will work with procurement, technology, risk, legal and business teams to ensure that suppliers are assessed consistently and that appropriate security requirements are embedded throughout the sourcing and contract lifecycle. The role will involve advising stakeholders on practical, risk-based controls while supporting the development of a resilient and well-governed supply chain.

Your responsibilities will include conducting supplier security assessments, reviewing due diligence evidence, analysing risk findings and recommending proportionate remediation actions. You will help define security requirements for tenders, contracts and supplier onboarding, monitor ongoing compliance, and support the management of exceptions and security incidents involving third parties. You will also maintain risk records, produce clear reports for technical and senior audiences, contribute to policies and standards, and help improve processes, methodologies and reporting. Where appropriate, you will support audits, assurance reviews, control testing and engagement with suppliers to validate the effectiveness of their security arrangements.

The successful candidate will have experience in information security, cyber risk, supplier assurance, third-party risk management or a related discipline. You should be confident interpreting security documentation such as ISO 27001 certifications, SOC reports, penetration testing results, business continuity plans and data protection assessments. A strong understanding of risk management, security governance, cloud services and relevant regulatory expectations is desirable. Excellent communication, analytical and stakeholder management skills are essential, along with the ability to manage competing priorities and explain complex issues in clear business language. Professional qualifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor or equivalent experience would be advantageous.

We are seeking a Security Consultant (Supply Chain) to help organisations identify, assess and reduce security risks across complex supplier, outsourcing and third-party ecosystems. You will work with stakeholders across procurement, technology, information security, legal and business operations to understand supply chain dependencies and develop practical, risk-based security solutions. The role requires a strong understanding of how supplier relationships, technology services, data flows and operational processes can affect organisational resilience and security.

Your responsibilities will include conducting third-party and supply chain security assessments, reviewing supplier security controls, and identifying risks relating to information protection, cyber security, resilience, privacy and regulatory compliance. You will support the development and implementation of security requirements for procurement and contract processes, contribute to due diligence and assurance activities, and provide clear recommendations to senior stakeholders. You may also help establish and improve supply chain security frameworks, policies, standards, risk registers and performance metrics. The role involves monitoring emerging threats, supporting remediation planning, and working with suppliers and internal teams to ensure agreed actions are delivered. You will be expected to produce concise reports, present findings effectively and contribute to continuous improvement across the security function.

The successful candidate will have experience in supply chain, third-party, information security, cyber risk or technology risk consulting, ideally within a regulated or complex environment. You should be confident assessing controls and evidence, interpreting security standards, and translating technical or operational risks into clear business impacts. Knowledge of frameworks and regulations such as ISO 27001, NIST, CIS Controls, SOC 2, GDPR or relevant sector requirements would be advantageous. Strong communication, stakeholder management, analytical and report-writing skills are essential, together with the ability to manage multiple priorities and work independently. Professional certifications in information security, risk management, audit or supply chain security are desirable, but equivalent practical experience will be considered.

We are seeking a Security Consultant (Supply Chain) to help organisations identify, assess and manage security risks across their suppliers, partners and wider third-party ecosystem. In this role, you will work with stakeholders across procurement, technology, risk and business operations to strengthen supply chain resilience and ensure that external dependencies are governed in line with applicable security standards and business requirements.

Your responsibilities will include conducting third-party security assessments, reviewing supplier controls and evidence, identifying vulnerabilities and control gaps, and documenting clear, risk-based recommendations. You will support the development and maintenance of supplier security requirements, questionnaires, due diligence processes and risk-rating methodologies. The role will also involve monitoring remediation plans, escalating material risks, contributing to risk acceptance decisions and producing concise reports for senior stakeholders. You may also assist with security reviews during supplier onboarding, contract renewals, service changes and major transformation programmes.

The successful candidate will have experience in information security, third-party risk management, supply chain assurance, governance, risk and compliance, or a related field. You should be confident interpreting security policies, standards and technical evidence, with practical knowledge of frameworks such as ISO 27001, NIST, CIS Controls or similar. Strong analytical, communication and stakeholder-management skills are essential, as is the ability to explain complex security issues clearly to both technical and non-technical audiences. Experience with cloud services, outsourced operations, software suppliers, operational resilience, data protection or business continuity would be advantageous. Relevant professional certifications, such as CISA, CISSP, CRISC, ISO 27001 or equivalent, are desirable. You will be expected to work independently, manage competing priorities and apply sound judgement in a fast-changing environment.

We are seeking a Security Consultant (Supply Chain) to strengthen the resilience, assurance and security of third-party relationships across a complex supplier ecosystem. In this role, you will assess supply chain risks, advise stakeholders on appropriate controls and support the secure onboarding, management and offboarding of suppliers. You will work with procurement, technology, legal, risk and operational teams to ensure security requirements are embedded throughout the supplier lifecycle and aligned with relevant policies, standards and regulatory expectations.

Your responsibilities will include conducting supplier security assessments, reviewing due diligence information, identifying control gaps and developing practical remediation plans. You will evaluate security questionnaires, audit reports, certifications, contractual provisions and risk evidence, escalating material concerns where appropriate. You will maintain accurate risk records, contribute to third-party risk reporting and help monitor remediation activity. The role will also involve supporting supply chain incident response, analysing emerging threats, advising on concentration and dependency risks, and contributing to the development of security standards, procedures and awareness materials.

You will bring experience in third-party risk management, supply chain security, information security governance or a related consulting environment. A strong understanding of security frameworks and standards such as ISO 27001, NIST, CIS or relevant data protection and resilience requirements is desirable. You should be confident interpreting technical and commercial information, challenging constructively and communicating risk clearly to both technical and non-technical audiences. Strong analytical, organisational and stakeholder management skills are essential, along with the ability to manage multiple priorities and work independently. Professional certifications in information security, risk or audit would be advantageous, as would experience with supplier assurance platforms, contract reviews, cloud services and critical technology providers.