Supplier Risk Analyst

Pontoon
Newcastle upon Tyne, United Kingdom
4 months ago
Applications closed

Related Jobs

View all jobs

Category Manager - Indirect (12-month - Maternity Cover)

Entrust London, United Kingdom
On-site

INFORMATION SECURITY MANAGER

Lamb Personnel Ltd Egham, United Kingdom

IT Risk Advisor

Orion Aberdeen, City Of Aberdeen, United Kingdom
Contract

Cyber security Architect

JAM Recruitment Portsmouth, Hampshire, United Kingdom
£850 pd On-site Clearance Required

Security Architect

TRIA Sunderland, Tyne & Wear, SR4 6ST, United Kingdom
Hybrid

Security Architect

SmartSourcing Ltd London, United Kingdom
£540 pa Hybrid Clearance Required
Posted
26 Jan 2026 (4 months ago)

Supplier Risk Analyst

Location: Newcastle upon Tyne (Hybrid 2 days on site)

Contract Length: 6‑month contract (possible extension)

Day Rate: £450 per day inside IR35 via umbrella

About the Opportunity

We're supporting a major organisation through a large‑scale separation and transformation programme, and we're looking for an experienced Supplier Risk Analyst to join the team responsible for onboarding a significant number of new third‑party suppliers.

This role is ideal for someone who enjoys structured work, thrives under pressure, and feels confident engaging with suppliers and internal risk specialists. You'll play a meaningful part in a programme with firm regulatory deadlines, giving you exposure across information security, operational resilience, IT continuity, legal, procurement, and wider governance teams.

Key Roles and Responsibilities

Leading the supplier due‑diligence process for new suppliers joining the organisation as part of a separation programme.

Reviewing onboarding forms and clarifying service scope, criticality, and resilience requirements with business stakeholders.

Coordinating and facilitating meetings with suppliers and internal SMEs to complete due‑diligence questionnaires and collate evidence.

Assessing and escalating risks across information security, operational resilience, data privacy and IT service continuity.

Managing and updating Kanban boards (Microsoft Planner), trackers and workplans.

Presenting risk findings clearly and concisely for senior stakeholders, translating technical information into accessible summaries.

Handling supplier pushbacks professionally and keeping delivery aligned with strict programme deadlines.

Working collaboratively across legal, procurement, compliance, data privacy, business owners and technology teams.

Key Skills & Experience

Experience in supplier risk, third‑party risk, assurance, or operational resilience.

Knowledge across at least one core risk domain:

Information Security

IT Service Continuity

Operational Resilience

Excellent stakeholder engagement skills, including managing external suppliers.

Strong planning, coordination and PMO‑style organisational skills.

Confident communicator able to summarise risk and technical issues clearly.

Comfortable working in high‑pressure, deadline‑driven

Understanding of regulatory frameworks such as operational resilience standards and sector‑specific supervisory statements.

Relevant certifications such as CISA (highly desirable) or CISSP (nice‑to‑have).

Experience of risk‑related PMO work.

Strong Excel skills; MS Project familiarity helpful but not required.

Please note: Due to the high volume of applications, only successful candidates will be contacted. If you do not hear from us within 48 hours, unfortunately, your application has not been successful on this occasion. However, we may retain your details for any future suitable vacancies and contact you accordingly.

Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you.

We use generative AI tools to support our candidate screening process. This helps us ensure a fair, consistent, and efficient experience for all applicants. Rest assured, all final decisions are made by our hiring team, and your application will be reviewed with care and attention

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Where to Advertise Cyber Security Jobs in the UK (2026 Guide)

Where to advertise cyber security jobs UK in 2026: the specialist boards, communities and channels that reach offensive, defensive and GRC security talent. The candidate pool is small, heavily vetted and in high demand across government, financial services, critical national infrastructure and the private sector simultaneously. Many of the strongest candidates hold active security clearances, are not actively job-searching through general platforms, and move primarily through specialist networks and trusted referrals. General job boards reach a broad audience but lack the specificity that security professionals expect. Specialist platforms, government-affiliated channels and cleared candidate networks each serve a different part of the market. This guide, published by CybersecurityJobs.tech, covers where to advertise cyber security roles in the UK in 2026, how the main platforms compare, what employers should expect to pay, and what the data says about hiring across different role types.

Cyber Security Jobs UK 2026: What to Expect Over the Next 3 Years

Cyber Security Jobs UK 2026: roles, salaries and the threat intelligence, cloud security and zero-trust hiring trends shaping UK cyber careers. Cyber security is one of the few sectors where demand for talent has never once dipped. Every major technological shift of the past decade — cloud migration, remote working, AI adoption, the proliferation of connected devices — has expanded the attack surface that security professionals are expected to defend. And every expansion of that attack surface has generated more jobs. But the cyber security jobs market of 2026 is not simply a larger version of what it was three years ago. It is a structurally different market. The threats have evolved, the technologies used to combat them have changed, the regulatory environment has tightened considerably, and the roles being created reflect all of that. A job seeker who understands only the cyber security landscape of 2023 is already working with an outdated map. The candidates who will thrive over the next three years are those who understand where the sector is heading — which specialisms are attracting the most investment, which technologies are reshaping defensive and offensive security practice, and how the definition of a cyber security professional is broadening well beyond the traditional image of a network defender in a SOC. This article breaks down what the UK cyber security jobs market is likely to look like through to 2028 — covering the titles emerging right now, the technologies driving employer demand, the skills that will matter most, and how to position your career ahead of the curve.