Role Description
Maintain oversight of cyber security risks across suppliers
Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately
Govern risk acceptance and exception management processes
Support risk-based prioritisation across security disciplines
Coordinate supplier compliance activities within the SIAM framework
Validate supplier adherence to agreed security requirements
Monitor security performance against contractual obligations
Drive accountability for control weaknesses, non-compliance, and improvement actions
Maintain visibility of compliance obligations and control requirements
Support compliance against frameworks and standards such as:
ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles
Coordinate remediation of identified compliance gaps
Produce consolidated security governance reporting
Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings
Present governance information to client stakeholders and governance forums
Support strategic planning and risk-informed decision making
Drive security governance maturity improvements across the supplier landscape
Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness
Security governance practices
Support continuous improvement programmes across the cyber security operating model
Facilitate cross-supplier resolution of governance issues