Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Shape frameworks for managing cyber risk and engage stakeholders across the organisation.
- Company: Join a global leader in cyber security transformation.
- Benefits: Competitive day rate, hybrid work model, and opportunity for impactful work.
- Why this job: Be at the forefront of enhancing third-party risk management in a dynamic environment.
- Qualifications: Strong analytical skills and experience in stakeholder engagement.
- Other info: Exciting chance to contribute to a multi-year transformation programme.
Location: Reading (Hybrid, 2 days per week)
Duration: Initial 6 Months
Contract Type: Day Rate Inside IR35
Are you energised by building structure where there is none, shaping frameworks that drive consistency, and influencing how organisations manage cyber risk? This role offers the opportunity to play a pivotal part in a multi‑year cyber security transformation programme focused on strengthening third‑party and supplier risk management across a diverse, global business landscape. You’ll join a dedicated cyber transformation team working across Procurement, Legal, Cyber Security, and Internal Audit to modernise how the organisation identifies, assesses, and manages critical suppliers. This is a hands‑on, analytical role ideal for someone who enjoys solving complex problems, engaging stakeholders, and designing practical, scalable solutions.
What You’ll Do
- Develop a Clear, Evidence‑Based Critical Supplier Definition: Gather and analyse business requirements to shape a robust definition of “critical suppliers”. Design a structured, user‑friendly framework that enables consistent supplier classification across the organisation. Produce guidance materials, templates, and documentation to support long‑term adoption.
- Support Business Units in Identifying Critical Suppliers: Engage stakeholders across multiple business units to embed the new framework. Facilitate workshops, discovery sessions, and one‑to‑one support to guide teams through applying the criteria. Consolidate outputs into a single, organisation‑wide view of critical suppliers.
- Strengthen Cyber Security Contract Addendums: Analyse existing contract language to identify gaps in cyber, regulatory, and risk‑related clauses. Collaborate with Legal, Procurement, and Cyber Security teams to enhance contractual protections for critical suppliers. Support the creation of standardised, risk‑aligned contract language.
- Contribute Across the Third‑Party Risk Transformation Programme: Provide business analysis expertise across additional workstreams. Support process design, requirements gathering, governance development, and documentation. Adapt to evolving priorities and help deliver a cohesive, multi‑phase transformation.
What You’ll Bring (Essential Skills)
Business Analyst (Third Party Cyber Security) employer: Caraffi
Contact Detail:
Caraffi Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Business Analyst (Third Party Cyber Security)
✨Tip Number 1
Network like a pro! Reach out to people in the industry, attend events, and connect on LinkedIn. You never know who might have the inside scoop on job openings or can refer you directly.
✨Tip Number 2
Prepare for interviews by researching the company and its culture. Tailor your answers to show how your skills align with their needs, especially in cyber security and risk management. Practice common interview questions to boost your confidence.
✨Tip Number 3
Showcase your analytical skills! Bring examples of how you've solved complex problems in the past, particularly in a business analyst role. Use data and metrics to back up your achievements – numbers speak volumes!
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen. Plus, we love seeing candidates who are proactive about their job search.
We think you need these skills to ace Business Analyst (Third Party Cyber Security)
Some tips for your application 🫡
Tailor Your CV: Make sure your CV speaks directly to the role of Business Analyst in Third-Party Cyber Security. Highlight relevant experience and skills that align with the job description, especially around cyber risk management and stakeholder engagement.
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about cyber security and how your analytical skills can contribute to our transformation programme. Keep it concise but impactful!
Showcase Your Problem-Solving Skills: In your application, give examples of how you've tackled complex problems in the past. We want to see your thought process and how you engage with stakeholders to design practical solutions.
Apply Through Our Website: We encourage you to apply through our website for a smoother application process. It helps us keep track of your application and ensures you don’t miss out on any important updates!
How to prepare for a job interview at Caraffi
✨Know Your Cyber Security Basics
Make sure you brush up on your knowledge of cyber security principles, especially around third-party risk management. Be ready to discuss how you would approach identifying and classifying critical suppliers, as this will show your understanding of the role's core responsibilities.
✨Prepare for Stakeholder Engagement
Since this role involves engaging with various business units, think about how you would facilitate workshops or one-on-one sessions. Prepare examples from your past experiences where you've successfully influenced stakeholders or led discussions to drive a project forward.
✨Showcase Your Analytical Skills
Be prepared to demonstrate your analytical abilities. You might be asked to solve a hypothetical problem related to supplier risk management. Practise breaking down complex issues into manageable parts and presenting your thought process clearly.
✨Familiarise Yourself with Contract Language
Understanding contract language is crucial for this position. Review common clauses related to cyber security and risk management. Be ready to discuss how you would identify gaps in existing contracts and suggest improvements, showcasing your attention to detail and collaborative spirit.