Senior Third-Party Cyber Risk Manager

DXC Technology; United Kingdom; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading tech firm in the UK seeks a Cyber Security Third Party Risk Manager to oversee vendor risk assessments and cyber controls. This role involves close collaboration with Supply Chain and Legal teams, and requires strong communication skills combined with a delivery-focused mindset. Ideal candidates will have a background in cybersecurity management and experience with risk and control frameworks. This position offers an opportunity to drive improvements in third-party cyber risk processes while ensuring compliance with security standards.

Responsibilities

• Manage the cyber risk assessment function for third-party vendors.
• Conduct risk assessments and manage risks from those assessments.
• Monitor third-party vendors for posture changes.
• Collaborate with Supply Chain and Legal on the assessment process.
• Maintain alignment with the NIST Cybersecurity Framework.
• Deliver reporting metrics on third-party risk frameworks.

Skills

Strong communication and business relationship skills

Delivery-focused mindset

Ability to organize and execute projects

Knowledge of information security concepts

Ability to present IT security strategy

Understanding of cyber risk and controls mapping

Ability to act independently

Knowledge of security best practices

Education

Demonstrable years of relevant experience

Experience conducting third-party risk assessments

Proven experience in cybersecurity management roles

IT Security or relevant Certifications

Job description

A leading tech firm in the UK seeks a Cyber Security Third Party Risk Manager to oversee vendor risk assessments and cyber controls. This role involves close collaboration with Supply Chain and Legal teams, and requires strong communication skills combined with a delivery-focused mindset. Ideal candidates will have a background in cybersecurity management and experience with risk and control frameworks. This position offers an opportunity to drive improvements in third-party cyber risk processes while ensuring compliance with security standards.