Third Party Cyber Oversight Specialist

Grant Thornton; Greater London; Hybrid; GBP 65,000 - 95,000; Full time

Job summary

Grant Thornton's Cyber Advisory is expanding its agile pool of interim specialists to support client work across financial services and beyond. You’ll lead or support third-party and supply chain cyber risk programmes, running due diligence, monitoring and remediation tracking.

This UK-wide contract role is hybrid and designed to stretch your expertise with meaningful, varied engagements rather than a single path.

Qualifications

• Experience leading third-party / supply chain cyber risk programmes.
• Ability to design or uplift a TPRM framework.
• Familiar with standards like DORA, NIST/ISO 27036.
• Comfort engaging procurement, legal and vendor contacts.
• CISSP/CISM or equivalent preferred; TPRM cert a plus.

Responsibilities

• Lead or support third-party and supply chain cyber risk programmes.
• Run due diligence, monitoring and remediation tracking.
• Engage procurement, legal and technical stakeholders.
• Design or uplift TPRM framework.

Skills

Third-party risk programmes

TPRM framework design

Stakeholder engagement

Regulatory standards knowledge

Job description

Interim Third Party Cyber Oversight Specialist

(Contract /UK wide/ Hybrid-working)

Joining us in Cyber Advisory team

Our Cyber Advisory team is growing its agile talent pool to support a strengthening pipeline of client work spanning cyber maturity assessments, governance and controls, third-party risk and emerging technology advisory. We're looking for experienced interim professionals to join our Agile Talent Community and deliver Grant Thornton-led advisory engagements for clients across financial services and beyond. You'll lead or support third-party and supply chain cyber risk programmes for our clients - running due diligence, ongoing monitoring and remediation tracking across a vendor estate. You'll be comfortable designing or uplifting a TPRM framework, not just executing an existing one, and equally at home engaging procurement and legal stakeholders as well as technical vendor contacts.

If you're an experienced Third-cyber risk specialist who's tired of choosing between freedom and meaningful work, there's another route. Within our Cyber Advisory team, you'll be given the opportunity to take on short- to medium-term projects that sharpen your expertise, stretch your thinking, and give you a different angle on familiar challenges - all without locking you into a single path.

Skills we are looking for

• Experience running third-party / supply chain cyber risk programmes, including due diligence, monitoring and remediation tracking
• Experience in designing or uplifting a TPRM framework, not just operating one
• Working knowledge of relevant standards and regulation (e.g. DORA third-party requirements, NIST/ISO 27036, SIG/VSA questionnaires)
• Confident engaging both procurement/legal stakeholders and technical vendor contacts
• CISSP, CISM or equivalent preferred; TPRM-specific certification a plus, not essential

Our culture and values

We have a culture where talented people thrive - where high performance is not just expected but enabled. It's a culture built on clarity, curiosity, and care. One that challenges us to aim higher, where we're encouraged to make the most of an abundance of resources to fuel our own development, and where we support each other to grow, learn, and succeed. Our open and accessible culture means you'll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That's why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work.

If you need adjustments at any point in the process, please let us know during the application stage - we aim to make sure our roles are accessible to everyone.