Cyber Risk Lead, Vendor Risk (Hybrid)

CPS Group (UK) Limited; Greater London; Hybrid; GBP 81,000 - 99,000; Full time

Job summary

CPS Group (UK) Limited is seeking a Cyber Risk Lead to own and develop the third-party cyber risk management framework within a global financial services organisation. The role sits in a hybrid setup with 3 days on site and involves close collaboration with IT, Procurement, Legal and senior stakeholders.

You will lead vendor risk assessments, develop MI and dashboards (Power BI), and ensure compliance with DORA, NIS2, PRA, FCA and GDPR. Relevant certifications are advantageous.

Qualifications

• Proven experience in Cyber Security/Information Security Risk focused on third-party/vendor risk.
• Strong experience designing and managing vendor security due diligence processes.
• Knowledge of vendor security assessments (CSA STAR/CAIQ, SOC 2, ISO 27001).
• Experience in regulated industries and understanding regulatory requirements.

Responsibilities

• Own and continuously improve the third-party cyber risk and security due diligence process.
• Lead vendor criticality assessments and ensure appropriate due diligence and ongoing monitoring.
• Manage cyber risk requirements for critical and high-risk suppliers.
• Ensure compliance with regulations including DORA, NIS2, PRA, FCA and GDPR.
• Develop MI, dashboards and reporting for senior IT stakeholders and executives.
• Provide cyber security guidance across vendor assessments, contracts and risk management.
• Identify gaps and drive improvements across third-party cyber risk processes.

Skills

Vendor risk management

Cyber security

Information security risk

Stakeholder communication

MI dashboards

Tools

Power BI

GRC platforms

Job description

CPS Group (UK) Limited is seeking a Cyber Risk Lead to own and develop the third-party cyber risk management framework within a global financial services organisation. The role sits in a hybrid setup with 3 days on site and involves close collaboration with IT, Procurement, Legal and senior stakeholders.

You will lead vendor risk assessments, develop MI and dashboards (Power BI), and ensure compliance with DORA, NIS2, PRA, FCA and GDPR. Relevant certifications are advantageous.