Senior Vendor Security Analyst

You will need to login before you can apply for a job.

National Energy System Operator are looking for a skilled & ambitious individual to join our Security Team in a Senior Vendor Security Analyst role.

The Senior Analyst plays a key leadership and subject matter expert role within NESO’s Vendor Security Management (VSM) function. The postholder will be expected to support the Vendor Security Manager in overseeing NESO’s vendor lifecycle, governing and developing NESO’s procured vendor tooling and overseeing the completion of all vendor assurance activity.

This role can be based from our offices in Wokingham or Warwick and we continue to offer hybrid working arrangements that allow for a blend of office and home working.

This role is designated as requiring a National Security Vetting (NSV) clearance. The level of clearance associated with the role will usually need you to have been a resident in the UK for the last five years to apply for the required level of clearance. We would invite any applicants who do not currently meet this residency requirement to still express an interest in the role.

• Lead and quality‑assure inherent risk assessments, ensuring consistency and accuracy across the team.
• Oversee junior analysts in successfully onboarding and triaging new vendors, including profiling and tiering via NESO’s vendor platform.
• Manage the issuance and validation of assurance questionnaires, ensuring timely vendor engagement and follow‑up.
• Provide a point of escalation for junior team members on assessing vendor risks and threat intelligence monitoring.
• Develop and maintain standard operating procedures (SOPs), triage templates, and guidance documentation.
• Drive automation and tooling enhancements to streamline assurance and reporting processes.
• Represent the VSM function in transformation planning, capability assessments, and stakeholder workshops.
• Provide coaching and oversight to junior analysts, supporting their development and ensuring knowledge transfer.
• Collaborate with internal teams (e.g., Procurement, GRC, Legal) to embed security controls into vendor lifecycle processes.

• Demonstrable experience in a senior security, compliance, or vendor risk role within a regulated industry.
• Led or contributed to transformation initiatives, including tooling implementation, process redesign, or capability uplift.
• Experience managing assurance workflows, risk assessments, and vendor engagement at scale.
• Familiarity with BAU transition planning, including RACI development, maturity assessments, and continuous improvement cycles.
• Degree or equivalent experience in cyber security, risk management, or a related discipline.
• In‑depth knowledge of third‑party risk management frameworks (e.g. NCSC), regulatory compliance (e.g. GDPR, NIS), and data protection principles.
• Preferably a cyber security qualification such as ISO 27001 Lead Implementer or CompTIA Security+.
• Proficiency with risk and assurance platforms such as Prevalent and Bit Sight.
• Advanced skills in Microsoft 365 (Excel, SharePoint, PowerPoint) and process documentation.
• Excellent communication and stakeholder engagement skills, with the ability to influence across technical and non‑technical audiences.

A competitive salary of £56,000 – £63,000 dependent on experience and capability. As well as your base salary, NESO’s core benefits are the essential perks and advantages that form part of your employee package.

• Bonus based on company performance.
• 26 days annual leave as standard.
• A competitive contributory pension scheme where we will double match your contribution to a maximum company contribution of 12%.
• Annual enrollment to NESO Savings Plan – if you save between £20 and £500 a month from your take‑home pay, we will pay a 50% matching contribution.
• Flexible bank holidays & holiday trading.
• Additional birthday day off.
• Cycle to Work scheme, retail & gym discounts.
• Private medical insurance, critical illness insurance & personal accident insurance.

At the National Energy System Operator (NESO), we play a vital role in tackling climate change and securing Great Britain’s energy future. We already operate…