Hybrid Third-Party Risk Analyst: Supplier Assurance

easyJet; Luton; Hybrid; GBP 40,000 - 60,000; Full time

Benefits offered by this job

Up to 20% bonus

7% pension contributions

Medical Cash Plan

Staff travel benefits

25 days annual leave + bank holidays

Annual holiday credit towards easyJet

Job summary

easyJet, a leading UK-based airline, seeks a Third Party Risk Analyst (Supplier Assurance) to assess and manage cyber and digital safety risks across its supplier network. You will work with internal stakeholders and external suppliers to identify risks, evaluate controls, and support remediation activities within agreed risk appetite.

The role sits in a collaborative Digital Safety team and involves developing risk documentation, participating in supplier reviews and contributing to governance

Qualifications

• Minimum two years' experience in information security, IT audit, GRC or third-party risk management.
• Understanding of security frameworks such as ISO 27001, SOC 2, PCI-DSS and GDPR.
• Experience analysing technical documentation and assessing control effectiveness.
• Strong written and verbal communication skills with the ability to translate technical risks into business messages.
• Proactive, organised and capable of managing workload and deadlines.

Responsibilities

• Conduct third-party supplier risk assessments, including due diligence and risk analysis.
• Track supplier assessments through the assurance lifecycle.
• Engage with suppliers to review findings and remediation activities.
• Contribute to the development and improvement of the third-party risk management framework.
• Produce risk insights and reports for governance forums.
• Support risk-based escalation of unresolved supplier security risks.

Skills

Information security

IT audit

GRC

Third-party risk management

Stakeholder communication

Education

Relevant information security qualifications

Tools

ISO 27001

SOC 2

PCI-DSS

GDPR

Job description

easyJet, a leading UK-based airline, seeks a Third Party Risk Analyst (Supplier Assurance) to assess and manage cyber and digital safety risks across its supplier network. You will work with internal stakeholders and external suppliers to identify risks, evaluate controls, and support remediation activities within agreed risk appetite.

The role sits in a collaborative Digital Safety team and involves developing risk documentation, participating in supplier reviews and contributing to governance