Third-Party Risk Analyst: Supplier Assurance | Hybrid & Travel Perks

easyJet holidays; Luton; Hybrid; GBP 40,000 - 56,000; Full time

Benefits offered by this job

Bonus up to 20%

Pension 7%

Medical cash plan

Staff travel benefits

25 days leave + bank holidays

Annual holiday credit

Flexible benefits

Job summary

easyJet is seeking a Third Party Risk Analyst (Supplier Assurance) to assess and manage cyber and digital safety risks across its supplier network. You will work with internal stakeholders and external suppliers to identify risks, evaluate controls, and support remediation to keep risks within appetite.

Key activities include due diligence reviews, risk analysis, lifecycle tracking, remediation planning and governance reporting.

Qualifications

• Two years' experience in information security, IT audit, GRC or third-party risk management.
• Understanding of ISO 27001, SOC 2, PCI-DSS and GDPR.
• Experience analysing technical documentation and assessing control effectiveness.
• Qualifications in information security or risk management, or equivalent knowledge.
• Strong written and verbal communication with ability to translate risks to business.

Responsibilities

• Conduct third-party supplier risk assessments including due diligence and risk analysis.
• Track and drive supplier assessments through the assurance lifecycle.
• Engage with suppliers to review findings and agree remediation activities.
• Support development and improvement of easyJet's third-party risk management framework.
• Report supplier risk insights and trends to governance forums.
• Monitor and escalate unresolved supplier security risks.
• Collaborate with supplier relationship managers to maintain risk visibility.
• Contribute to risk documentation and runbooks.

Skills

InfoSec experience

GRC

ISO 27001

SOC 2, PCI-DSS, GDPR

Stakeholder comms

Education

Information security qualification

Job description

easyJet is seeking a Third Party Risk Analyst (Supplier Assurance) to assess and manage cyber and digital safety risks across its supplier network. You will work with internal stakeholders and external suppliers to identify risks, evaluate controls, and support remediation to keep risks within appetite.

Key activities include due diligence reviews, risk analysis, lifecycle tracking, remediation planning and governance reporting.