TPRM Analyst

Marks and Spencer; City Of London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading retail company in London is looking for a Third-Party Risk Management Analyst to analyze and manage security risk assessments for suppliers. The role includes delivering risk assessments, analyzing outcomes for potential security threats, and preparing ongoing reports on security positions. Ideal candidates will have at least 2 years of security-related experience and strong problem-solving skills. The position offers various employee benefits including a colleague discount, holiday entitlement, and wellbeing support programs.

Benefits

20% colleague discount

Competitive holiday entitlement

Discretionary bonus schemes

Defined Contribution Pension Scheme

Range of training programmes

Wellbeing support programs

Charity volunteer day

Qualifications

• Demonstrable knowledge of Third-Party Security and cybersecurity governance domains.
• At least 2 years' relevant security experience across sectors like Retail or Financial Services.

Responsibilities

• Support the delivery of third-party security risk assessments during vendor selection and onboarding.
• Analyse outputs of risk assessments to identify security risks impacting M&S.
• Prepare reports on third-party security risk posture and update KPIs.

Skills

Third-Party Security Knowledge

Analytical Skills

Problem-Solving Skills

Time Management

Organisational Skills

Job description

All the details

We are seeking an experienced Third-Party Risk Management Analyst to ensure that our suppliers' security positions are in line with M&S standards and contractual terms. With oversight from the Third-Party Risk Management Leadership and Principal, you will be responsible for the analysis and assessment of third-party security risk assessments to identify potential security risks to M&S. You will also act as a nominated single point contact for suppliers and will be responsible for assessing / monitoring their security posture throughout the lifecycle of M&S contracts.

What you'll do

• Deliver and/or support the delivery of third-party security risk assessments during the vendor selection and onboarding processes and as part of ongoing security monitoring
• Analyse the output of third-party security risk assessments to identify potential or actual security risks that may impact M&S
• Deliver and/or support the preparation of ongoing reporting of third-party security risk posture, updating KPIs and dashboards
• Carry out or support regular reviews of standard contractual clauses from a cybersecurity perspective, collaborating with Legal, Data Protection & Privacy and Procurement teams
• Support and actively contribute to the processes and systems of the third-party security risk management programme, helping to define and maintain standards and guardrails
• Proactive interaction with third parties to obtain reporting and insight on key information security events, incidents and mitigation efforts

Who you are

• Must have demonstrable knowledge of Third-Party Security, supported by a general understanding of cybersecurity governance domains
• Experience in delivering and analysing third party security risk assessments to manage their security obligations in line with global organisational standards.
• At least 2 years' relevant security related experience, preferably across a range of sectors (e.g., Retail, Financial Services)
• Proven analytical and problem-solving skills
• Time management and organisational skills to manage a variety of stakeholders and meet deadlines.

What's in it for you

Being a part of M&S is exactly that - playing your part to bring the magic of M&S to our customers every day. We're an inclusive, dynamic, exciting, and ever evolving business built on doing the right thing and bringing exceptional quality, value, service to every customer, whenever, wherever and however they want to shop with us.

Here are some of the benefits we offer that make working for M&S just that little bit more special

• After completing your probationary period, you'll receive 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.
• Competitive holiday entitlement with the potential to buy extra holiday days!
• Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
• A generous Defined Contribution Pension Scheme and Life Assurance.
• A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
• Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
• Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
• Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.
• A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away from work.

Everyone's welcome

We're ambitious about the future of retail. We're innovating, disrupting, and leading the way into a more inspiring, digital era. It's an exciting time to be part of M&S.

To support us on our journey, we're building inclusive, diverse teams where everyone can be themselves, do their best work, and make change happen. We support each other and succeed together.

Don't worry if you don't meet every single requirement of the job description. It's more of a guide to what's possible within the role. If you're passionate, ready to work hard, and think the role feels right for you, we'd love to hear from you. #hybridrole #LI-Hybrid #LI-OT1