Risk Management Analyst

Are you experienced in supplier risk, compliance, or information security? We're looking for a Third-Party Assurance Analyst to help assess and manage security and privacy risks across our supplier network, ensuring compliance, reducing risk, and protecting critical business services.
What you'll be doing:

Assess new and existing suppliers for security and privacy risks
Review questionnaires, evidence, and contracts to identify gaps and controls
Support supplier onboarding, renewals, and ongoing assurance activities
Track remediation actions and risk mitigation plans
Escalate key risks and provide clear recommendations to stakeholders
Support assurance activities for mergers & acquisitions (M&A)
Work closely with Security, Privacy, Risk, and Compliance teamsWhat we're looking for:

Experience in supplier assurance, risk management, compliance, or audit
Understanding of third-party risk and data protection requirements
Knowledge of ISO 27001, ISO 27701, NIST, or similar frameworks
Strong stakeholder management and communication skills
Ability to assess controls and present findings clearly
Relevant certifications (CISA, CRISC, CIPP/E) desirableWhat's in it for you?

Work within a collaborative security and compliance function
Exposure to complex supplier, regulatory, and client environments
Opportunity to influence risk decisions and improve assurance processesPlease note: SC Clearance will be required for longer-term appointments due to the sensitivity of information handled.

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.
If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)
Only candidates based in UK and eligible to work in UK are allowed