Cyber Security Supply Chain Analyst

In this role, you’ll assess, analyse and report on the cyber posture of key suppliers, ensuring their security controls meet industry‑leading standards. You’ll manage risk assessments end‑to‑end, review security artefacts, scope penetration testing (OWASP Top 10), and work closely with internal teams and suppliers to drive meaningful improvements.

This is a fantastic opportunity for someone eager to make a real impact within a regulated environment where robust cyber security is essential.

• Assessing supplier cyber security posture
• Reviewing security documentation and evidence
• Managing Information Security risk across the supply chain
• Aligning controls to NIST & CIS frameworks
• Scoping & managing penetration testing activity
• Reporting on KPIs and compliance metrics
• Collaborating with stakeholders across technology & procurement

• Experience in Cyber Security, Supplier Assurance or Information Security
• Knowledge of control frameworks (NIST, CIS)
• Understanding of GDPR, NISR and PCI DSS
• Ability to articulate risk clearly and influence decisions

• 28 days holiday + bank holidays (ability to buy or sell 5 days)
• Industry‑leading pension (double matched up to 15%)
• Dedicated training & development pathways
• Electric vehicle scheme & retail discounts
• Two paid volunteering days each year

If you’d like to help strengthen cyber resilience across a major UK infrastructure provider, apply now or get in touch for a confidential conversation.