Analyst, Vendor Risk Management

TN United Kingdom; Leeds; Hybrid; GBP 40,000 - 70,000; Full time

Job summary

An established industry player is seeking a dynamic Analyst in Vendor Risk Management to enhance client supply chain security. This role involves direct client consultation, implementing risk management programs, and fostering client relationships to optimize cybersecurity practices. With a focus on delivering innovative solutions, you will engage in various risk management consulting activities and support workshops to improve vendor onboarding and monitoring processes. If you possess a strong background in cybersecurity and are driven by results, this opportunity offers a chance to make a significant impact in the field of vendor risk management.

Qualifications

• 1+ years in Third-Party Risk Management consulting at a Big 4 firm.
• Experience in cybersecurity or technology organizations is essential.

Responsibilities

• Consult with clients to manage vendor risks and improve cybersecurity.
• Implement third-party risk management programs and support clients.

Skills

Third-Party Risk Management

Cybersecurity

Communication Skills

Client Relationship Management

Project Management

Analytical Skills

Education

CISSP or similar certification

Information Security/Cybersecurity Accreditation

Tools

Risk Management Software

Data Analytics Tools

Job description

Analyst, Vendor Risk Management

Location: Preference is near Leeds, UK but open to remote in UK

The Position

The Analyst, Vendor Risk Management will work with clients to identify client supply chain risk and cybersecurity challenges, advise on best practices in vendor risk management, and ensure successful delivery of BlueVoyant solutions to solve customer problems.

Key Responsibilities

• Consult directly with clients to establish and improve the management of vendor risks.
• Implement third-party cybersecurity risk management programs and support the day-to-day review of and interaction with third-party vendors.
• Participate in third-party risk management consulting engagements as part of BlueVoyant’s Supply Chain Defense business.
• Support Third Party Risk Workshops at BlueVoyant Clients focused on the following topics:

1. Vendor Identification and Stratification
2. Vendor On-boarding, Monitoring and Remediation
3. Cybersecurity Risk Questionnaire Development

Project and program delivery, including project and process management, reporting, engagement in senior leadership meetings, drafting and reviewing materials for senior management and other governance activities.

Communicate findings and recommendations to client stakeholders, best practices, tools and technology.

Mature standard operating procedures for customers to optimize utilization of BlueVoyant’s offerings.

Enable business development in renewal, cross-sell, and up-sell opportunities of BlueVoyant offerings while maintaining client trust.

Create repeatable processes and frameworks portable across clients and industries to accelerate future Third-Party Risk Cybersecurity Risk Management implementations.

Travel to Clients as requested.

German or French as a first or second language preferable but not essential.

Qualifications

• CISSP or similar preferred.
• Familiarity with encryption fundamentals and network design required.
• 1+ years of Third-Party Risk Management consulting (including vendor cybersecurity risk) at a Big 4 consulting firm or vendor risk management company.
• 2+ years leading an enterprise risk management program, including Third-Party Risk, Internal Risk Maturity and Assessment, Risk Consolidation, and Risk Reporting.
• Information security/cybersecurity accreditation and background.
• Experience working in a cybersecurity or technology organization.
• Entrepreneurial nature and drive for results.
• Clear communication and writing skills.
• Ability to conduct deep client discovery to uncover root cause problems and build trusted relationships.
• Ability to design programs and solutions with minimal guidance and oversight.

About BlueVoyant

At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem.

Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts.

BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies.

Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.

All employees must be authorized to work in the United Kingdom.

BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics.

In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.

BlueVoyant Candidate Privacy Notice: To understand how we secure and manage your personal data upon submitting a job application, please see our Candidate Privacy Notice, which can be found here - Candidate Privacy Notice Powered by JazzHR