Third-Party Risk Management Officer in London

Third-Party Risk Management Officer in London

London Full-Time 45000 - 55000 £ / year (est.) Home office (partial)
AVEVA

At a Glance

  • Tasks: Manage and assess third-party suppliers to identify security risks and drive improvements.
  • Company: AVEVA, a leader in digital security and innovation.
  • Benefits: Flexible benefits, 28 days annual leave, private medical insurance, and education assistance.
  • Other info: Hybrid working model with opportunities for career growth and development.
  • Why this job: Join a dynamic team tackling cyber security challenges and making a real impact.
  • Qualifications: Good communication skills, knowledge of procurement, and basic security understanding.

The predicted salary is between 45000 - 55000 £ per year.

The Third-Party Risk Management team oversees all of AVEVA's suppliers to ensure that they do not represent an unacceptable risk to the business or fail to meet minimum security requirements. The role requires a broad understanding of procurement concepts, security, regulation and the capacity to engage with a range of stakeholders. The team are currently stretched dealing with an influx of suppliers that need to be assessed to help AVEVA meet its regulatory obligations; this will be a fast‑paced role focused on delivering tangible business outcomes.

Key responsibilities

  • Manage and assess third‑party suppliers to identify security risks and issues.
  • Communicate risks and issues to a range of stakeholders (including suppliers) in a clear and actionable way to drive improvements across AVEVA's supply chain.
  • Build communication and relationship skills, and navigate complex requirements with stakeholders.
  • Assist external suppliers with their maturity to improve organisational and technical measures to ensure information security is baked into their processes and the technology and/or services they provide to AVEVA.
  • Assist in maturing processes and tooling to streamline third‑party risk management processes.
  • Data analysis, data entry and report production in TPRM tooling.

Essential requirements

  • Good communication and engagement skills with capacity to explain issues to a range of audiences.
  • Good knowledge of procurement concepts, tools and processes.
  • Basic knowledge of contract law.
  • Intermediate security knowledge, including working knowledge of ISO 27001 and NIST cybersecurity framework.
  • Basic understanding of NIS 2 and EU CRA regulations.
  • Capacity to drive process management improvements, including design and application to standard operating procedures.
  • Capacity to promote AVEVA's interests with suppliers that have security issues or need to address risks.

Desired skills

  • Critical thinking skills to generate business value and identify opportunities for improvements.
  • Tenacity to drive improvements and enhancements to suppliers' security controls to mitigate risks identified to AVEVA through its supply base.
  • Experience of TPRM tooling such as Riskonnect.

Digital Security at AVEVA

Our Digital Security team is responsible for protecting AVEVA’s digital assets and keeping the company’s data and IP secure. We’re also playing a critical role in AVEVA’s move to the cloud. As cyber threats grow and more data moves into the cloud, the importance of our role is only going to grow. If you’re a collaborative problem solver that’s passionate about cyber security, you’ll find fulfillment and opportunity in our team.

UK Benefits include

  • Flexible benefits fund, emergency leave days, adoption leave, 28 days annual leave (plus bank holidays), pension, life cover, private medical insurance, parental leave, education assistance program.

Hybrid working

We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on‑site 50% of your working hours to support collaboration and connection. Some positions are fully office‑based depending on the nature of the work, and certain roles that support specific customers or markets may be remote.

AVEVA requires all successful applicants to undergo and pass a drug screening and comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third‑party personal data may involve additional background check criteria.

AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business. AVEVA provides reasonable accommodation to applicants with disabilities where appropriate. If you need reasonable accommodation for any part of the application and hiring process, please notify your recruiter. Determinations on requests for reasonable accommodation will be made on a case‑by‑case basis.

Third-Party Risk Management Officer in London employer: AVEVA

AVEVA is an exceptional employer that prioritises employee well-being and professional growth, offering a flexible benefits fund, generous annual leave, and a supportive hybrid working environment. With a strong commitment to diversity and inclusion, AVEVA fosters a collaborative culture where employees can thrive while contributing to meaningful projects in the field of digital security. The opportunity to engage with a variety of stakeholders and enhance third-party risk management processes makes this role both rewarding and impactful.

AVEVA

Contact Details:

AVEVA Recruitment Team

StudySmarter Expert Advice🤫

We think this is how you could land Third-Party Risk Management Officer in London

Join Compliance Communities

Get involved in compliance and risk communities — both online and offline. Look for forums, LinkedIn groups, or even local meetups where compliance pros hang out. You never know who might drop a job opportunity your way!

Attend Industry Conferences

Keep an eye out for compliance and risk management conferences and workshops in your area. These events are a goldmine for networking, and they often have job boards or recruiters on-site looking for new talent. Plus, it’s a chance to learn what's trending in the field.

Leverage Your University Career Services

If you’ve recently graduated or are still studying, head over to your university's career services. Many companies, including those in compliance, actively recruit fresh talent through these services, so make sure you tap into that resource.

Showcase Your Knowledge Online

Start writing articles or blog posts about compliance topics that interest you. Share them on platforms like LinkedIn to demonstrate your knowledge and passion. This not only builds your presence in the field but can also catch the attention of companies like AVEVA looking for candidates who are engaged and informed.

We think you need these skills to ace Third-Party Risk Management Officer in London

Communication Skills
Stakeholder Engagement
Procurement Knowledge
Contract Law Understanding
ISO 27001 Knowledge
NIST Cybersecurity Framework Knowledge
NIS 2 and EU CRA Regulations Understanding

Some tips for your application 🫡

Show Your Understanding of Compliance:In the compliance-risk field, it's super important to showcase your understanding of regulations and risk management frameworks. Highlight any relevant coursework, certifications (like ICA or AML), or even projects that demonstrate your knowledge and commitment to this area. We want to see how you can navigate this complex landscape!

Quantify Your Achievements:When detailing your experience, try to quantify your achievements. For example, if you've previously worked on a project that improved compliance metrics or reduced risk exposure, give us the numbers! This data-driven approach really stands out to hiring managers in compliance-risk roles.

Tailor Your CV to Reflect Relevant Skills:Make sure your CV highlights skills that are particularly relevant to compliance, like attention to detail, analytical thinking, and report writing. Ensure these are easy to spot – consider using bullet points to break down your responsibilities and achievements for maximum impact!

Craft a Motivating Cover Letter:In your cover letter, let us know why you’re excited about the compliance-risk role at AVEVA. Share what motivates you about compliance, and how you believe you can contribute to our mission. This is your chance to showcase not only your skills but also your passion for this important field!

How to prepare for a job interview at AVEVA

Master the Regulations

Brush up on key compliance regulations relevant to the industry you're applying to. Familiarising yourself with specific laws and frameworks used in your field will give you an edge during technical questions. Show that you’re not just aware of them but can also apply them—think real-life scenarios!

Show Your Analytical Skills

Compliance roles really focus on analytical skills, so be prepared for case studies or situational questions during the interview. We've got to demonstrate how we approach risk assessments or compliance audits, possibly drawing on examples from past experiences or university projects. Bring some thoughtful case scenarios to discuss!

Know Your Tools

Get comfortable with commonly used compliance software and tools. Familiarity with platforms like RSA or MetricStream can really impress during your interview, as it shows you're ready to hit the ground running. If you’ve had any experience with them, make sure to highlight that!

Align with Company Culture

Since it's a full-time position, show your long-term commitment and interest in the company’s mission and values. Dive into how your ethics and professional philosophy align with AVEVA’s stance on compliance. A shared vision can really resonate with interviewers looking for fit as much as skill!