Summary: The role of a Supply Chain Cyber Risk Management Specialist involves supporting the OT Security Department's Governance, Risk, and Compliance Team by conducting cybersecurity risk assessments for vendor and supplier relationships. The position requires enhancing risk assessment methodologies, collaborating with stakeholders on risk mitigation strategies, and ensuring compliance with regulatory standards. The role is a 6-month contract with a competitive hourly rate and requires one day per week on-site in Swindon.

Key Responsibilities:

• Performing and supporting supply chain cybersecurity risk assessments across various vendor and supplier relationships.
• Enhancing risk assessment methodologies and tools specific to the cybersecurity supply chain domain.
• Collaborating with stakeholders to implement risk mitigation strategies based on assessment findings.
• Drafting and maintaining standards, procedures, and processes for supply chain cybersecurity resilience.
• Supporting the drafting and implementation of training for stakeholders on cybersecurity supply chain risk management best practices.
• Monitoring, tracking, and advising on supplier-related cybersecurity risk findings and follow-up actions.
• Supporting internal and external audits related to supply chain cybersecurity.

Key Skills:

• In-depth knowledge of cybersecurity standards and frameworks (e.g., NIS2, ISO 27001, ISO 27017, B3S).
• Experience with risk assessments in supply chain contexts.
• Proven experience implementing regulatory requirements and designing/auditing governance systems.
• Familiarity with contract management and vendor risk assessment tools.
• Technical knowledge of threats and vulnerabilities in the supply chain context.
• Proficiency in Microsoft Office Suite and experience with data analysis tools or risk management platforms.

Salary (Rate): 70

City: Swindon

Country: United Kingdom

Working Arrangements: hybrid

IR35 Status: outside IR35

Seniority Level: Mid-Level

Industry: IT