Description
Marks & Spencer is hiring a Third-Party Risk Management Analyst to assess and monitor suppliers’ security postures against M&S standards and contractual terms. The role covers third-party security risk assessments during vendor selection, onboarding, and ongoing monitoring; analysis and escalation of security risks; reporting on security posture and KPIs; review of cybersecurity contractual clauses; and engagement with suppliers and internal security, legal, data protection, privacy, and procurement teams. The position is based in Salford Quays, Manchester or Waterside Office, London, and is marked as hybrid.
