Primary Role & Responsibilities
- Work with Product Owner and Group Product owner to define team development tasks to complete in quarterly iterations MBIs
- Assist PO and GPO with prioritisation activities
- Delivering against the overall architecture of our supplier security assurance transformation to ensure it meets business requirements and integrates seamlessly with existing systems as set out by the Product Owner
- Ensure the implementation follows a structured approach with minimal disruption to business operations
- Creation of training documentation and delivery of end user training
- Maintain appropriate documentation of any systems/processes included as part of transformational and development work.
- Conduct analysis on issues identified and implement corrective and preventative actions to resolve.
- Deliver risk management initiatives to support effective application of the SCSA framework and conduct risk obligations
Key Skills, Experience & Knowledge
- Understanding of supply chain/supplier/third party security assurance using manual and automated processes coupled with relevant experience in a supply chain security assurance related role.
- Should have worked in 2LOD & 3LOD with end-to-end knowledge in Third Party Risk Management & its Lifecycle.
- Knowledge of information security principles and best practices and experience in managing information security risk and controls in a regulatory setting.
- Significant experience of implementing GRC tooling (ideally with a focus on Supply Chain/Supplier/Third Party Security Assurance)
- Should have sound knowledge of Vendor On-Boarding process, Due diligence, monitoring, Off boarding etc.
- Experience in training and creating user manuals/guides
- Performing Risk Assessments and understanding various tools and applications.
- Should have completed Risk Certifications ISO 27001 LA/LI, GDPR, CISA, CISP etc.
- Should have experience in handling Audits, Feedback, customer escalations etc.
- Jira
- Conflu