Risk Management Analyst

Are you experienced in supplier risk, compliance, or information security? We're looking for a Third-Party Assurance Analyst to help assess and manage security and privacy risks across our supplier network, ensuring compliance, reducing risk, and protecting critical business services.
What you'll be doing:

• Assess new and existing suppliers for security and privacy risks
• Review questionnaires, evidence, and contracts to identify gaps and controls
• Support supplier onboarding, renewals, and ongoing assurance activities
• Track remediation actions and risk mitigation plans
• Escalate key risks and provide clear recommendations to stakeholders
• Support assurance activities for mergers & acquisitions (M&A)
• Work closely with Security, Privacy, Risk, and Compliance teams

What we're looking for:

• Experience in supplier assurance, risk management, compliance, or audit
• Understanding of third-party risk and data protection requirements
• Knowledge of ISO 27001, ISO 27701, NIST, or similar frameworks
• Strong stakeholder management and communication skills
• Ability to assess controls and present findings clearly
• Relevant certifications (CISA, CRISC, CIPP/E) desirable

What's in it for you?

• Work within a collaborative security and compliance function
• Exposure to complex supplier, regulatory, and client environments
• Opportunity to influence risk decisions and improve assurance processes

Please note: SC Clearance will be required for longer-term appointments due to the sensitivity of information handled.

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.
If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)