Cyber Security Third-Party Risk Manager

Bonhill Partners; Greater London; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

Bonhill Partners is seeking an experienced Cyber Security Third-Party Risk Analyst to support and enhance the firm’s enterprise third-party cybersecurity risk programme.

In this hybrid role, you will oversee the assessment, governance, and ongoing monitoring of cybersecurity risks across suppliers and external partners, working with cross-functional stakeholders to strengthen risk controls throughout the vendor lifecycle.

Qualifications

• Strong experience in cyber security, TPRM, IT risk, GRC or compliance.
• Experience managing third-party/vendor risk programmes.
• Knowledge of NIST, ISO 27001, CIS, PCI-DSS.
• Experience with vendor assessments and GRC/TPRM platforms.
• Excellent stakeholder management and communication skills.

Responsibilities

• Oversee assessment, governance and ongoing monitoring of cybersecurity risks with suppliers and external partners.
• Collaborate with cross-functional stakeholders to implement effective risk controls across the vendor lifecycle.

Skills

Cyber security

TPRM

IT risk

GRC

Compliance

Vendor risk programmes

Stakeholder management

Job description

A leading global investment bank is seeking an experienced Cyber Security Third-Party Risk Analyst to support and enhance its enterprise third-party cybersecurity risk programme.

This role is responsible for overseeing the assessment, governance, and ongoing monitoring of cybersecurity risks associated with suppliers, vendors, and external partners. The successful candidate will work closely with cross-functional stakeholders to ensure effective risk management practices across the vendor lifecycle.

Working pattern: Hybrid 3-4 days in office

Requirements

• Strong experience in Cyber Security, TPRM, IT Risk, GRC, or Compliance
• Experience managing third-party/vendor risk programmes
• Knowledge of frameworks such as NIST, ISO 27001, CIS, and PCI-DSS
• Experience with vendor assessments and GRC/TPRM platforms
• Excellent stakeholder management and communication skills

This is a contract-to-permanent opportunity, with and inital 3 month contract leading to a guaranteed permanent position.