Third Party Cyber Risk Lead
On-siteLondon, England, United Kingdom
Job Summary
Lead role focused on maturing TMHCC International’s third-party cyber risk management, owning the vendor due diligence process for onboarding and continuous monitoring, establishing vendor criticality assessments, ensuring regulatory-aligned due diligence for high-risk suppliers (DORA, NIS2, PRA, FCA), creating MI and dashboards for executives, embedding vendor risk controls with IT, Procurement, and Legal, and producing documentation and training materials while staying current on trends. Strong emphasis on coordinating cross-functional teams, presenting risk considerations to non-technical stakeholders, and driving improvements across the vendor risk program.
Required Qualifications
- Bachelor’s degree in information security, Technology Risk Management or a related field
- CISSP
- CISM
- CRISC
- ISO 27001 Lead Implementer/Lead Auditor
- Experience in regulated industries
- Proven experience designing, running, and improving vendor security due diligence processes
- Strong knowledge of security assurance certifications and assessments (ISO 27001, SOC 2, CSA STAR/CAIQ)
- Ability to coordinate meetings with multiple stakeholders
- Analytical and communication skills
Desired Qualifications
- CISSP
- CISM
- CRISC
- ISO 27001 Lead Implementer/Lead Auditor
- Experience in regulated industries
- Vendor risk management
- Power BI
- Strong communication skills
- Stakeholder management
- Security risk assessments
- Regulatory compliance (DORA, NIS2, PRA, FCA)
- Due diligence processes
- MI/dashboard development
- Security controls integration into vendor risk management
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.