Hybrid Cyber Third-Party Risk Manager

Tesco Insurance and Money Services; Reigate; Hybrid; GBP 72,000 - 87,000; Full time

Benefits offered by this job

Pension scheme

Virtual GP Service

Annual bonus

Generous holiday allowance (7.2 weeks)

Colleague Clubcard discounts

Family leave benefits

Learning opportunities and training

Buy as you Earn/Save as you Earn share

Job summary

Tesco Insurance and Money Services seeks a Third Party Risk Manager – Cyber to lead the design and operation of our cyber risk management with suppliers and partners. You will ensure risks are identified, assessed, treated and monitored in line with enterprise risk appetite and regulatory expectations.

You will provide guidance to GRC teams, support audits, and collaborate with Procurement, Legal, and Tech to drive pragmatic risk decisions. Hybrid working with travel to offices as needed.

Qualifications

• Third‑party cyber risk expertise with ownership of risk processes.
• Deep knowledge of supplier cyber risk and assurance models.
• Experience supporting internal and external audits and regulatory reviews.
• Ability to articulate and score supplier cyber risks against risk appetite.
• Certifications such as CISSP/CISM/CRISC/CISA or ISO 27001 related preferred.

Responsibilities

• Own and evolve the cyber third‑party risk management framework.
• Lead risk assessments of suppliers, partners and third‑parties.
• Oversee supplier assurance activity including questionnaires and onsite assessments.
• Ensure risks are articulated, scored, and recorded with treatment plans.
• Coordinate remediation tracking through to closure.
• Act as primary contact for cyber third‑party risk during audits and reviews.
• Collaborate with Procurement, Legal, Technology and Data Protection teams.
• Provide clear reporting on risk posture and trends.
• Coach GRC Managers and Analysts to build capability.

Skills

Cyber risk management

Supplier assurance

GRC

Stakeholder management

Regulatory knowledge

Audit support

Risk appetite

CISSP/CISM/CRISC/CISA

ISO 27001 lead implementer/auditor

Job description

Tesco Insurance and Money Services seeks a Third Party Risk Manager – Cyber to lead the design and operation of our cyber risk management with suppliers and partners. You will ensure risks are identified, assessed, treated and monitored in line with enterprise risk appetite and regulatory expectations.

You will provide guidance to GRC teams, support audits, and collaborate with Procurement, Legal, and Tech to drive pragmatic risk decisions. Hybrid working with travel to offices as needed.