Third Party Risk Analyst (Supplier Assurance)

easyJet; Luton; Hybrid; GBP 40,000 - 60,000; Full time

Benefits offered by this job

Up to 20% bonus

7% pension contributions

Medical Cash Plan

Staff travel benefits

25 days annual leave + bank holidays

Annual holiday credit towards easyJet

Job summary

easyJet, a leading UK-based airline, seeks a Third Party Risk Analyst (Supplier Assurance) to assess and manage cyber and digital safety risks across its supplier network. You will work with internal stakeholders and external suppliers to identify risks, evaluate controls, and support remediation activities within agreed risk appetite.

The role sits in a collaborative Digital Safety team and involves developing risk documentation, participating in supplier reviews and contributing to governance

Qualifications

• Minimum two years' experience in information security, IT audit, GRC or third-party risk management.
• Understanding of security frameworks such as ISO 27001, SOC 2, PCI-DSS and GDPR.
• Experience analysing technical documentation and assessing control effectiveness.
• Strong written and verbal communication skills with the ability to translate technical risks into business messages.
• Proactive, organised and capable of managing workload and deadlines.

Responsibilities

• Conduct third-party supplier risk assessments, including due diligence and risk analysis.
• Track supplier assessments through the assurance lifecycle.
• Engage with suppliers to review findings and remediation activities.
• Contribute to the development and improvement of the third-party risk management framework.
• Produce risk insights and reports for governance forums.
• Support risk-based escalation of unresolved supplier security risks.

Skills

Information security

IT audit

GRC

Third-party risk management

Stakeholder communication

Education

Relevant information security qualifications

Tools

ISO 27001

SOC 2

PCI-DSS

GDPR

Job description

We are easyJet – a FTSE listed, £multi-billion low-cost airline that serves tens of millions of customers every single year. If you’re reading this, you have probably already been an easyJet customer, and you’ll know that there is no more iconic (or Orange!) travel brand in Europe.

We fly more than 1,207 routes, connecting 38 countries across Europe, and employ more than 18,000 colleagues. We’re on a mission to make low-cost travel easy – and whatever your role here, you’ll connect millions of people to what they love using Europe’s best airline network, great value fares, and friendly service.

What makes us easyJet? Our Promise Behaviours - we are Safe, Bold, Welcoming and Challenging. Four Behaviours. One Spirit. One easyJet.

READ ON IF YOU

• Have experience in information security, IT audit, governance, risk and compliance, or supplier risk management.
• Enjoy analysing risk, engaging with stakeholders and helping drive meaningful improvements.
• Are confident communicating technical concepts to non-technical audiences.
• Thrive in a collaborative environment where you can influence positive outcomes across the business.
• Want to play a key role in protecting a complex and fast-moving digital landscape.

THE TEAM

Our Digital Safety team is made up of cyber security professionals dedicated to ensuring that Digital Safety is as embedded within easyJet as Aircraft Safety. Working closely with Operational, Commercial, Regulatory and Audit teams, we help safeguard the organisation from evolving digital risks.

This role works alongside the Supplier Resilience Lead, Senior Digital Safety Risk Manager, Head of Digital Safety Assurance and the wider Digital Safety team to strengthen our approach to supplier and third-party risk management.

THE ROLE

As a Third Party Risk Analyst (Supplier Assurance), you'll help assess, monitor and manage cyber and digital safety risks across easyJet’s supplier network. You'll work closely with internal stakeholders and external suppliers to identify risks, evaluate controls and support remediation activities, ensuring risks remain within our agreed appetite.

Key Responsibilities Include

• Conducting third-party supplier risk assessments, including due diligence reviews, supplier questionnaires and risk analysis.
• Tracking and driving supplier assessments through the full assurance lifecycle.
• Engaging with suppliers to review findings and agree risk remediation activities.
• Supporting the ongoing development and improvement of easyJet’s third-party risk management framework.
• Reporting supplier risk insights and trends through appropriate governance forums.
• Supporting the management and escalation of unresolved supplier security risks.
• Partnering with supplier relationship managers to maintain visibility of supplier risk exposure.
• Working with subject matter experts to evaluate findings and develop remediation plans.
• Contributing to third-party risk documentation, processes and operational runbooks.
• Participating in supplier contract reviews and providing risk-based recommendations.
• Performing ongoing monitoring and reassessment of suppliers based on risk and oversight requirements.
• Supporting supplier prioritisation activities based on changing risk profiles.
• Contributing to risk metrics and KPIs that measure the effectiveness of the third-party risk programme.
• Supporting risk reporting, compliance activities and audit preparedness.
• Maintaining risk registers, exception registers and associated reporting.
• Facilitating meetings, documenting decisions and tracking associated actions.

What We’re Looking For

• A minimum of two years' experience within information security, IT audit, GRC or third-party risk management.
• Understanding of recognised security, compliance and risk frameworks such as ISO 27001, SOC 2, PCI-DSS and GDPR.
• Experience analysing technical documentation and assessing control effectiveness.
• Relevant information security or risk management qualifications, or equivalent knowledge and experience.
• Strong written and verbal communication skills with the ability to translate technical risks into business-focused messages.
• A proactive and organised approach to managing workload and priorities.
• Good analytical and problem-solving skills.
• Ability to build effective working relationships with a broad range of stakeholders.
• Experience producing reports and supporting governance activities.
• Commitment to continuous learning and developing subject matter expertise.
• A positive, collaborative and delivery-focused mindset.

What You’ll Get In Return

• Up to 20% maximum bonus
• 7% pension contributions
• Medical Cash Plan
• Excellent staff travel benefits
• 25 days of annual leave + bank holidays
• Annual credit towards an easyJet holiday
• Various flexible benefits and extras

PRACTICALITIES

This is a full-time position. We support hybrid working and spend time together as a team in our Luton HQ offices.

REASONABLE ADJUSTMENTS

At easyJet, we are dedicated to fostering an inclusive workplace that reflects the diverse customers we serve across Europe. We welcome candidates from all backgrounds. If you require specific adjustments or support during the application or recruitment process, such as extra time for assessments or accessible interview locations, please contact us at [e-mail]. We are committed to providing reasonable adjustments throughout the recruitment process to ensure accessibility and accommodation.

Business Area

Legal

Primary Location

United Kingdom-London-London Luton Airport

Organisation

Legal

Schedule

Full-time

Unposting Date

09/09/2026, 11:59:00 PM