Senior Third-Party Security Risk Lead

Swift Software; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

SWIFT is seeking a senior security risk professional to lead the Third-Party Security Due Diligence function, ensuring suppliers and partners are assessed, onboarded, and monitored in line with security, resilience, regulatory, and operational risk requirements.

You will manage end-to-end due diligence, drive remediation activities, and support compliance with DORA, NIS2, ISO 27001, GDPR, and SWIFT's internal standards across the supplier lifecycle.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Risk Management, Information Systems, or a related discipline.
• Minimum 7 years' experience in cybersecurity, third‑party security risk management, supplier assurance, security assurance, or technology risk within financial services, critical infrastructure, or a highly regulated environment.
• Strong understanding of third‑party security risk management practices and supplier assurance methodologies.

Responsibilities

• Lead the end-to-end third-party security due diligence process, from supplier onboarding through ongoing assurance, reassessment, and offboarding.
• Perform comprehensive security risk assessments of third parties, evaluating cybersecurity, resilience, data protection, cloud security, supply chain security, and operational risk exposures.
• Establish and maintain a risk-based supplier assurance programme for critical and high-risk third parties.

Skills

Risk assessment

Stakeholder management

Security risk management

Regulatory compliance

Education

Bachelor's degree in Information Security/Cybersecurity/Computer Science/Risk Management/Information Systems

Tools

GRC platforms

Third‑party risk mgmt tools

Job description

SWIFT is seeking a senior security risk professional to lead the Third-Party Security Due Diligence function, ensuring suppliers and partners are assessed, onboarded, and monitored in line with security, resilience, regulatory, and operational risk requirements.

You will manage end-to-end due diligence, drive remediation activities, and support compliance with DORA, NIS2, ISO 27001, GDPR, and SWIFT's internal standards across the supplier lifecycle.