Senior Supplier Assurance Lead: Cyber Risk & Third-Party

Morson Group; Manchester; Hybrid; GBP 55,000 - 92,000; Full time

Job summary

Morson Group is seeking a Senior Supplier Assurance Lead / Cyber Security Risk Manager to drive risk-based supplier assessments across a complex third-party ecosystem. This hybrid role in the North West focuses on managing evidence, controls, and governance to reduce cyber risk with suppliers.

You will lead assurance activities, engage stakeholders across procurement, legal and security, and ensure compliance with evolving regulatory requirements and industry standards.

Qualifications

• Senior level experience in information security, cyber risk, or supplier assurance.
• Proven ability to perform third-party cyber risk assessments and supplier assurance reviews.
• Experience reviewing supplier security evidence such as penetration tests, audits and certifications.
• Strong understanding of supplier risk management and cyber risk messaging to stakeholders.
• Ability to communicate risk to technical and non-technical audiences and influence decision makers.
• Experience with risk management frameworks, governance, and assurance methodologies.
• Excellent stakeholder management and relationship-building skills.
• Eligibility for UK SC clearance; active SC clearance preferred.

Responsibilities

• Lead cyber security assessments of suppliers using public data, evidence and assurance tooling.
• Assess supplier security documentation including penetration test reports, audits and SOC reports.
• Manage the supplier assurance process, tracking, reporting, governance and metrics.
• Provide risk-based recommendations for onboarding, renewals and ongoing engagements.
• Ensure compliance with regulatory requirements in supplier assurance activities.
• Maintain processes in line with best practice and evolving threats.
• Collaborate with procurement, legal and operations to coordinate risk management.
• Define cyber security requirements in supplier contracts and documents.
• Coordinate security assessments covering information and physical security controls.
• Identify improvements to processes, tooling and reporting for third-party risk management.
• Review customer security requirements when the organisation acts as a supplier.

Skills

Cyber security

GRC

Third-party risk

Supplier assurance

Stakeholder management

Risk communication

Assessment tooling

ISO 27001 knowledge

Tools

Penetration testing reports review

SOC reports familiarity

Job description

Morson Group is seeking a Senior Supplier Assurance Lead / Cyber Security Risk Manager to drive risk-based supplier assessments across a complex third-party ecosystem. This hybrid role in the North West focuses on managing evidence, controls, and governance to reduce cyber risk with suppliers.

You will lead assurance activities, engage stakeholders across procurement, legal and security, and ensure compliance with evolving regulatory requirements and industry standards.