Supplier Security Assurance Specialist

The role holder will be responsible for: Liaison with suppliers to gather relevant information, monitor ongoing compliance of suppliers depending on the risk profile of the supplier and establish the level of security risk. Operation and development of relevant processes, tools and reports. Operate as a key subject matter expert on all supplier security assurance activities including due diligence testing, supplier assurance assessments and security schedule contract negotiation. Support the ongoing identification and implementation of improvements to the Supplier Security Assurance framework to reflect the changing threat environment and best practice assurance approaches Perform security assessments of suppliers based on their criticality, recording results accurately and initiating appropriate assurance response. Knowledge and experience of third -party security risk management and general security background in a complex global organisation. Knowledge of ISO standards in relation to security related disciplines. Very good stakeholder management, communication and influencing skills. Experience with supplier governance, understanding of security management processes, practices and technical countermeasures. Ability to analyze complex information and identify key and relevant points, including communicating in a relevant and easy to understand manner. Nice to have professional qualifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, ISO 22301 Lead Auditor by a recognized professional body.