Remote. Global. Fast-growing. Join Cintra and take ownership of third-party risk, supplier compliance, and vendor lifecycle management across our global business. This is a pivotal role responsible for ensuring Cintra meets client due diligence requirements while maintaining a robust vendor management and compliance programme.
Key Responsibilities
Client Supplier Requests (Cintra as Supplier)
- Own client supplier registration, onboarding, recertification, and due diligence processes.
- Maintain Cintra profiles within customer-mandated procurement and third-party risk platforms including Ariba, Coupa, Jaggaer, Prevalent, OneTrust, Aravo, Hyperproof, and Whistic.
- Coordinate responses to security, compliance, procurement, and governance questionnaires, including SIG, SIG Lite, CAIQ, and bespoke client assessments.
- Gather, validate, and submit supporting documentation from HR, Finance, Security, and Legal teams.
- Maintain a centralized repository of approved responses, certifications, policies, and supporting evidence.
- Coordinate review and approval workflows prior to submission.
- Track request volumes, SLAs, renewal dates, and outstanding actions, escalating issues where required.
- Monitor client reassessment cycles and proactively refresh documentation before expiry.
Vendor Intake, Selection & Onboarding
- Act as the central intake point for all new vendor requests.
- Partner with business stakeholders to document requirements, anticipated spend, risk exposure, and business criticality.
- Support RFI and RFP activities, vendor evaluations, reference checks, and supplier selection processes.
- Maintain an accurate vendor inventory covering ownership, services provided, spend, contract details, and status.
- Apply vendor risk-tiering methodologies based on operational criticality, data access, financial exposure, and regulatory impact.
- Conduct pre-contract due diligence including certification reviews, financial health assessments, insurance verification, sanctions screening, and conflict-of-interest reviews.
- Coordinate onboarding activities across Legal, Finance, and Security to ensure governance requirements are completed before engagement.
Contract & Renewal Management
- Maintain vendor contracts, renewal schedules, notice periods, and expiry dates.
- Engage business owners well in advance of renewal milestones.
- Lead vendor renewal assessments using performance, spend, risk, and strategic alignment data.
- Support contract negotiations alongside Legal and Finance stakeholders.
- Monitor vendor compliance against contractual obligations, SLAs, pricing agreements, insurance requirements, and data protection commitments.
Performance & Relationship Management
- Ensure all vendors have a designated internal owner and clearly defined performance expectations.
- Maintain vendor scorecards and facilitate regular business reviews.
- Act as the escalation point for performance issues, service disruptions, disputes, and remediation activities.
- Monitor supplier organizational changes, financial concerns, incidents, acquisitions, and other events requiring reassessment.
- Maintain current supplier contacts and escalation paths.
Annual Compliance Reviews & Offboarding
- Partner with Security to conduct annual and risk-triggered vendor compliance reviews.
- Assess supplier security posture, certifications, insurance coverage, financial stability, and contractual compliance.
- Document findings, assign risk ratings, and track remediation actions through to completion.
- Support vendor exit and transition planning for critical suppliers.
- Coordinate offboarding activities including access removal, data destruction, final payments, and contract closure.
Reporting & Governance
- Produce regular leadership reporting on vendor performance, compliance status, spend, risk exposure, review completion, and upcoming renewals.
- Maintain audit-ready records and documentation.
- Support internal and external audits by providing required evidence and reporting.
Cross-Functional Collaboration
- Partner with Legal on contracts, renewals, regulatory obligations, confidentiality agreements, and dispute resolution.
- Partner with Finance on vendor setup, payment processes, tax documentation, financial assessments, and spend management.
- Partner with Security on risk assessments, questionnaires, remediation activities, and incident management.
- Facilitate governance meetings and maintain clear ownership, approval, and escalation processes.
- Serve as Cintra's subject matter expert for third-party risk and supplier compliance.
Process & Programme Improvement
- Develop and maintain standard operating procedures, workflows, templates, and playbooks.
- Identify opportunities for automation and process efficiency.
- Support implementation and optimization of TPRM, procurement, governance, and contract lifecycle management tools.
- Stay current with industry trends, emerging risks, regulatory requirements, and third-party risk management best practices.
Required Experience & Skills
- Demonstrated experience in vendor management, supplier management, procurement, third-party risk management, or a related discipline.
- Proven experience managing vendor relationships across the full lifecycle.
- Strong understanding of contracts, SLAs, renewals, liability, insurance, and supplier governance.
- Working knowledge of SOC 2, ISO 27001, and GDPR principles.
- Excellent written communication and client-facing documentation skills.
- Strong organizational and project management capabilities.
- Ability to influence stakeholders across multiple business functions.
- Experience with Microsoft 365, procurement platforms, contract management tools, and governance systems.
Preferred Skills
- Bachelor's degree in Business, Supply Chain, Risk Management, Information Systems, Law, or a related field.
- Experience with Coupa, Ariba, Ironclad, Zip, ServiceNow, OneTrust, Prevalent, Whistic, Aravo, Vanta, or Drata.
- Experience developing vendor scorecards and leading supplier business reviews.
- Previous experience within technology, cloud services, professional services, or regulated industries.
Core Competencies
- Relationship management and stakeholder engagement
- Commercial awareness and negotiation support
- Risk-based decision making
- Attention to detail and accuracy
- Accountability and ownership
- Cross-functional collaboration
- Clear communication
- Professional discretion and confidentiality
#LI-SL1
#J-18808-Ljbffr
Supplier Compliance Coordinator in Glasgow employer: Cintra
Cintra is an exceptional employer located in the vibrant city of Newcastle upon Tyne, offering a dynamic work culture that fosters collaboration and innovation. With a strong emphasis on employee growth opportunities and a hybrid working model, you will thrive in a supportive environment while enjoying competitive bonuses and the chance to make a significant impact in the payroll and HR services sector.
