Supplier Assurance Manager

Overview

In this role you ensure secure, compliant third-party engagements across the supplier lifecycle. You will lead the supplier risk management framework, collaborating with Information Security, Procurement, Legal and Vendor Management to embed security into contracts and onboarding. You’ll assess supplier controls, maintain risk registers, and drive remediation and assurance activities. Your work supports scalable growth and resilient operations in a multi-brand environment, with a strong focus on risk-informed decision making and regulatory compliance.

Pay / Benefits

• competitive benefits package
• hybrid working model
• opportunity to work across multiple brands
• inclusive environment
• career development opportunities

Responsibilities

• Own and improve the Third-Party Risk Management Framework and supplier assurance processes end-to-end.
• Conduct security and risk assessments of suppliers, evaluating controls and evidence for compliance.
• Maintain supplier risk registers, identify gaps, plan remediation, and escalate as needed.
• Collaborate with Procurement, Legal and Vendor Management to embed security requirements in contracts and onboarding.
• Provide guidance on supplier security risks, new services and technical integrations to stakeholders.
• Support audits, regulatory engagements, and reporting; manage assurance tools, metrics, and documentation.
• Drive continuous improvement of methodologies, workflows and tooling; monitor emerging threats and supply chain risks.

Key requirements

• Proven experience in Information Security, Supplier Risk Management or Third-Party Risk Management at scale.
• Strong knowledge of ISO 27001, SOC 2 and NIST with ability to assess complex controls and risks.
• Experience negotiating commercial agreements and advising on security requirements and risk mitigation.
• Excellent communication and stakeholder management; translate technical concepts for diverse audiences.
• Proven ability to build trusted relationships and influence decisions at all levels.
• Highly organized, analytical, with strong problem-solving and prioritisation skills; aware of evolving threats.
• Proactive, collaborative, with integrity, customer focus and commitment to compliance.

• clear communication
• stakeholder management
• collaboration
• ISO 27001
• SOC 2
• NIST

…