Security Consultant (Supply Chain)

Overview

In this role you join the Supply Chain Threat team to safeguard the supplier ecosystem of a major UK bank. You will translate threat intel and risk insights into practical guidance for internal teams and suppliers, and help shape security across third-party ecosystems. You’ll work with cross-functional groups to improve data, tooling and proactive security practices in an agile environment. This is an opportunity to contribute to a high-impact, intelligence-led security program at a leading financial services organisation.

Pay / Benefits

• generous pension contribution up to 15%
• annual bonus award (group performance)
• share schemes including free shares
• discounted shopping benefits
• 28 days’ holiday plus bank holidays
• wellbeing initiatives and parental leave policies

Responsibilities

• Identify cyber threats and risks across the supplier ecosystem using threat intelligence, data and security tooling
• Translate complex findings into clear, actionable recommendations for decision-makers
• Support incident response within the supplier ecosystem and quantify associated risks
• Collaborate with multiple teams to align security design and continuous improvement across third-party ecosystems
• Explore automation and AI to move towards proactive, intelligence-led security
• Tackle diverse challenges in an agile environment across threat intelligence, incident response, supplier risk, data and technology

Key requirements

• Understanding of supplier ecosystem threats with awareness of current and emerging cyber risks
• Deep security expertise across threat detection, endpoint security, malware protection and information security controls
• Ability to apply operational risk principles to drive clear, proportionate decisions
• Ability to analyze complex data and translate it into business-relevant recommendations
• Strong collaboration and stakeholder management skills
• Willingness to embrace change and work in agile environments
• Interest in automation and AI to improve security outcomes
• CISSP, CISM or CISMP certifications are desirable but not essential

• collaboration
• stakeholder management
• analytical thinking
• threat intelligence
• incident response
• data analysis

…