Third Party Risk Analyst (Supplier Assurance)

easyJet holidays; Luton; On-site; GBP 40,000 - 56,000; Full time

Benefits offered by this job

Bonus up to 20%

Pension 7%

Medical cash plan

Staff travel benefits

25 days leave + bank holidays

Annual holiday credit

Flexible benefits

Job summary

easyJet is seeking a Third Party Risk Analyst (Supplier Assurance) to assess and manage cyber and digital safety risks across its supplier network. You will work with internal stakeholders and external suppliers to identify risks, evaluate controls, and support remediation to keep risks within appetite.

Key activities include due diligence reviews, risk analysis, lifecycle tracking, remediation planning and governance reporting.

Qualifications

• Two years' experience in information security, IT audit, GRC or third-party risk management.
• Understanding of ISO 27001, SOC 2, PCI-DSS and GDPR.
• Experience analysing technical documentation and assessing control effectiveness.
• Qualifications in information security or risk management, or equivalent knowledge.
• Strong written and verbal communication with ability to translate risks to business.

Responsibilities

• Conduct third-party supplier risk assessments including due diligence and risk analysis.
• Track and drive supplier assessments through the assurance lifecycle.
• Engage with suppliers to review findings and agree remediation activities.
• Support development and improvement of easyJet's third-party risk management framework.
• Report supplier risk insights and trends to governance forums.
• Monitor and escalate unresolved supplier security risks.
• Collaborate with supplier relationship managers to maintain risk visibility.
• Contribute to risk documentation and runbooks.

Skills

InfoSec experience

GRC

ISO 27001

SOC 2, PCI-DSS, GDPR

Stakeholder comms

Education

Information security qualification

Job description

Job Description - Third Party Risk Analyst (Supplier Assurance) (17394)

Job Description

Third Party Risk Analyst (Supplier Assurance) ( 17394 )

Description

Third Party Risk Analyst (Supplier Assurance)

We are easyJet – a FTSE listed, £multi-billion low-cost airline that serves tens of millions of customers every single year. If you’re reading this, you have probably already been an easyJet customer, and you’ll know that there is no more iconic (or Orange!) travel brand in Europe.

We fly more than 1,207 routes, connecting 38 countries across Europe, and employ more than 18,000 colleagues. We’re on a mission to make low-cost travel easy – and whatever your role here, you’ll connect millions of people to what they love using Europe’s best airline network, great value fares, and friendly service.

What makes us easyJet? Our Promise Behaviours - we are Safe, Bold, Welcoming and Challenging. Four Behaviours. One Spirit. One easyJet.

READ ON IF YOU

• Have experience in information security, IT audit, governance, risk and compliance, or supplier risk management.
• Enjoy analysing risk, engaging with stakeholders and helping drive meaningful improvements.
• Are confident communicating technical concepts to non-technical audiences.
• Thrive in a collaborative environment where you can influence positive outcomes across the business.
• Want to play a key role in protecting a complex and fast-moving digital landscape.

THE TEAM

Our Digital Safety team is made up of cyber security professionals dedicated to ensuring that Digital Safety is as embedded within easyJet as Aircraft Safety. Working closely with Operational, Commercial, Regulatory and Audit teams, we help safeguard the organisation from evolving digital risks.

This role works alongside the Supplier Resilience Lead, Senior Digital Safety Risk Manager, Head of Digital Safety Assurance and the wider Digital Safety team to strengthen our approach to supplier and third-party risk management.

THE ROLE

As a Third Party Risk Analyst (Supplier Assurance), you'll help assess, monitor and manage cyber and digital safety risks across easyJet’s supplier network. You'll work closely with internal stakeholders and external suppliers to identify risks, evaluate controls and support remediation activities, ensuring risks remain within our agreed appetite.

Key responsibilities include:

• Conducting third-party supplier risk assessments, including due diligence reviews, supplier questionnaires and risk analysis.
• Tracking and driving supplier assessments through the full assurance lifecycle.
• Engaging with suppliers to review findings and agree risk remediation activities.
• Supporting the ongoing development and improvement of easyJet’s third-party risk management framework.
• Reporting supplier risk insights and trends through appropriate governance forums.
• Supporting the management and escalation of unresolved supplier security risks.
• Partnering with supplier relationship managers to maintain visibility of supplier risk exposure.
• Working with subject matter experts to evaluate findings and develop remediation plans.
• Contributing to third-party risk documentation, processes and operational runbooks.
• Participating in supplier contract reviews and providing risk-based recommendations.
• Performing ongoing monitoring and reassessment of suppliers based on risk and oversight requirements.
• Supporting supplier prioritisation activities based on changing risk profiles.
• Contributing to risk metrics and KPIs that measure the effectiveness of the third-party risk programme.
• Supporting risk reporting, compliance activities and audit preparedness.
• Maintaining risk registers, exception registers and associated reporting.
• Facilitating meetings, documenting decisions and tracking associated actions.

Requirements of the Role

WHAT WE’R LOOKING FOR

• A minimum of two years' experience within information security, IT audit, GRC or third-party risk management.
• Understanding of recognised security, compliance and risk frameworks such as ISO 27001, SOC 2, PCI-DSS and GDPR.
• Experience analysing technical documentation and assessing control effectiveness.
• Relevant information security or risk management qualifications, or equivalent knowledge and experience.
• Strong written and verbal communication skills with the ability to translate technical risks into business-focused messages.
• A proactive and organised approach to managing workload and priorities.
• Good analytical and problem-solving skills.
• Ability to build effective working relationships with a broad range of stakeholders.
• Experience producing reports and supporting governance activities.
• Commitment to continuous learning and developing subject matter expertise.
• A positive, collaborative and delivery-focused mindset.

WHAT YOU’LL GET IN RETURN

• Up to 20% maximum bonus
• 7% pension contributions
• Medical Cash Plan
• Excellent staff travel benefits
• 25 days of annual leave + bank holidays
• Annual credit towards an easyJet holiday
• Various flexible benefits and extras

PRACTICALITIES

This is a full-time position. We support hybrid working and spend time together as a team in our Luton HQ offices.

REASONABLE ADJUSTMENTS

At easyJet, we are dedicated to fostering an inclusive workplace that reflects the diverse customers we serve across Europe. We welcome candidates from all backgrounds. If you require specific adjustments or support during the application or recruitment process, such as extra time for assessments or accessible interview locations, please contact us at [e-mail]. We are committed to providing reasonable adjustments throughout the recruitment process to ensure accessibility and accommodation.

Business Area

Legal