Business Analyst – Third Party Cyber Security

Business Analyst – Third Party Cyber Security Overview

We are looking for a Business Analyst specializing in Third Party Cyber Security to join our team in London. This contract role is part of a significant transformation program aimed at enhancing the management of supplier and vendor cyber security risks across the organization. The successful candidate will collaborate with various teams, including Procurement, Legal, Cyber Security, and Risk, to establish a consistent approach to managing third-party cyber risks.

Key Responsibilities:

• Develop and implement frameworks to identify, classify, and assess critical suppliers.
• Support business units in applying the framework and consolidating outputs into a group-wide view.
• Analyze contract language and support the creation of standardized, risk-aligned clauses.
• Provide business analysis expertise across additional third-party cyber initiatives.

Skills & Experience:

• Proven ability to gather and translate requirements into structured outputs.
• Experience in risk, cyber, or procurement domains and designing frameworks/models.
• Strong analytical mindset with excellent stakeholder engagement skills.
• Familiarity with cyber security regulations (GDPR, NIS2, DORA) and third-party standards (ISO 27001/27036).

This role is ideal for individuals who enjoy driving consistency, shaping processes, and supporting strategic cyber initiatives across an organization.

Degree Requirement: Not Specified

Visa Sponsorship May be