At a Glance
- Tasks: Review and assess third-party risk artefacts to ensure compliance and mitigate risks.
- Company: Join a leading cyber security recruitment firm with a focus on innovation.
- Benefits: Hybrid work model, competitive salary, and opportunities for professional growth.
- Why this job: Be the expert voice in supply chain risk management and make a real impact.
- Qualifications: Experience in Third-Party Risk Management and strong understanding of compliance frameworks.
- Other info: Dynamic role with a chance to collaborate across teams and enhance your career.
The predicted salary is between 48000 - 84000 ÂŁ per year.
Job Summary
Head of Permanent Recruitment UK | EMEA | AMERICAS Providing tailored support in the ever-evolving world of cyber security, AI, and Emerging…
Now Hiring: Manager – Supply Chain Risk & GRC Due Diligence Specialist
Location: Hybrid | London
We’re looking for a Supply Chain Risk & GRC Due Diligence Specialist to bring expert insight into third-party assessments — someone who understands not just what to look for, but why it matters.
About the Role:
You’ll act as the subject matter expert when generalist risk teams escalate due diligence questionnaires for specialist review. Your focus will be on reviewing third-party responses with a governance, risk, and compliance (GRC) lens, verifying the strength of their controls and supporting documentation.
You’ll identify, assess, and validate artefacts — the documents, evidence, and data that demonstrate compliance and risk mitigation. This is a specialist, investigative role, not just a checklist job.
Key Responsibilities:
- Using your GRC credibility and business acumen, review and assess supplier artefacts, taking into consideration that certain controls may be unachievable, but pose no risk.
- Understand what the artefacts tell you in terms of low to high risk and work cross-functionally with legal, procurement, security, and delivery teams to help them with supply chain choices.
- Identify and validate required compliance artefacts such as:
- Validated framework certificates, such as, SOC 2, SO 27001, NIST, etc
- Penetration test reports
- Business continuity and disaster recovery plans
- Security and data privacy policies
- Provide actionable insights on risks, gaps, and mitigation strategies
- Support both vendor onboarding and client-facing service assurance efforts
What You Bring:
- Proven experience in Third-Party Risk Management (TPRM), GRC.
- Strong understanding of common compliance frameworks (ISO 27001, SOC 2, GDPR, etc.)
- Ability to interpret and validate technical and policy artefacts
- Critical thinking skills with an investigative, detail-oriented mindset
- Experience interfacing with internal teams and external vendors – as an enabler!
- Relevant certifications (e.g. CISA, CRISC, CISM, ISO 27001 Lead Auditor) are highly desirable
You’ll be the specialist voice that ensures risks are not just reviewed — they’re truly understood and managed.
Apply here or email me at r.kelly@ltharper.com
Position Details
- Seniority level: Mid-Senior level
- Employment type: Full-time
- Job function: Information Technology
- Industries: Security and Investigations, Information Services, and IT Services and IT Consulting
Referrals increase your chances of interviewing at LT Harper – Cyber Security Recruitment by 2x
Sign in to set job alerts for “Supply Chain Manager” roles.
London, England, United Kingdom 1 month ago
London, England, United Kingdom 2 weeks ago
West Drayton, England, United Kingdom 1 week ago
London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 2 weeks ago
Hinxton, England, United Kingdom 4 weeks ago
London, England, United Kingdom 1 month ago
Greater London, England, United Kingdom 1 week ago
Senior Manager Supply Chain Europe – Additives Segment
London, England, United Kingdom 1 week ago
TikTok Shop – Logistics Operations Manager
London, England, United Kingdom 3 weeks ago
Manager, Supply Acquisition EMEA (Hotels)
London, England, United Kingdom 22 hours ago
London, England, United Kingdom 1 month ago
TikTok Shop – Logistics Quality & Performance Manager
London, England, United Kingdom 3 days ago
Uxbridge, England, United Kingdom 22 hours ago
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr
Senior Manager - Supply Chain Risk employer: LT Harper - Cyber Security Recruitment
Contact Detail:
LT Harper - Cyber Security Recruitment Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Senior Manager - Supply Chain Risk
✨Tip Number 1
Network like a pro! Reach out to your connections in the supply chain and risk management sectors. Attend industry events or webinars to meet potential employers and get your name out there.
✨Tip Number 2
Showcase your expertise! Prepare a portfolio that highlights your experience with GRC frameworks and third-party risk management. This will help you stand out during interviews and discussions.
✨Tip Number 3
Practice your pitch! Be ready to explain how your skills can directly benefit the company. Tailor your message to align with their needs, especially around compliance and risk mitigation.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets noticed. Plus, we love seeing candidates who take the initiative to connect with us directly.
We think you need these skills to ace Senior Manager - Supply Chain Risk
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter for the role. Highlight your experience in Third-Party Risk Management and GRC, as this is what we’re really looking for. Show us how your skills align with the job description!
Showcase Your Expertise: Don’t just list your qualifications; explain how they relate to the role. If you’ve got certifications like CISA or ISO 27001 Lead Auditor, let us know how they’ve helped you in past roles. We want to see your expertise shine through!
Be Clear and Concise: When writing your application, keep it straightforward. Use clear language and avoid jargon unless it’s relevant. We appreciate a well-structured application that gets straight to the point without fluff.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way to ensure your application gets seen by the right people. Plus, it shows us you’re genuinely interested in joining our team!
How to prepare for a job interview at LT Harper - Cyber Security Recruitment
✨Know Your Compliance Frameworks
Make sure you brush up on your knowledge of compliance frameworks like ISO 27001 and SOC 2. Be ready to discuss how these frameworks apply to third-party risk management and why they matter in the context of supply chain risk.
✨Showcase Your Investigative Skills
Prepare examples from your past experiences where you've had to assess and validate artefacts. Highlight your critical thinking and detail-oriented mindset, as this role requires a deep understanding of risks and controls.
✨Understand Cross-Functional Collaboration
Be ready to talk about how you've worked with different teams, such as legal and procurement, to make informed supply chain choices. This will demonstrate your ability to be an enabler and work effectively across departments.
✨Prepare for Scenario-Based Questions
Expect questions that put you in hypothetical situations regarding risk assessment and compliance. Think through how you would approach these scenarios, focusing on your analytical skills and decision-making process.