Risk Manager (Third Party & Supply Chain)
Liverpool, Merseyside, North West, United Kingdom
AMS CWS
and security risk assessments on suppliers, vendors, and other third parties across the supply chain. Evaluating vendor security postures using evidence-based assessments (e.g., SOC 2, ISO 27001, penetration tests). Ensuring third parties meet Evelyn Partners' minimum security standards and apply effective risk mitigations where gaps are … and governance, risk, and compliance . Strong understanding of ISO 27001 (implementation, audit, and continuous improvement), Cyber Essentials, and NIST CSF. Familiarity with reviewing SOC 2 Type II, ISO 27001 certifications, and other third-party assurance artefacts. Ability to analyse and evaluate technical and procedural controls in vendor More ❯
Employment Type: Contract
Posted: