Third-Party Risk Management Officer

Join AVEVA, a global leader in industrial software, as a Third-Party Risk Management Officer. In this fast-paced role, you will oversee all of AVEVA's suppliers to ensure they meet minimum security requirements and do not pose an unacceptable risk to the business. You will communicate risks and issues to a range of stakeholders, assist external suppliers in improving their organizational and technical measures, and help streamline Third-Party Risk Management processes. This position offers a hybrid working model, competitive benefits, and opportunities for professional development.

• Manage and assess Third-Party Suppliers to identify security risks and issues, and communicate risks and issues to stakeholders.
• Assist external suppliers with their maturity to improve their organizational and technical measures to ensure information security.
• Drive process management improvements, including design and application to standard operating procedures, to streamline Third-Party Risk Management processes.
• Basic understanding on NIS 2 and EU CRA regulations
• Good communication and engagement skills with the capacity to explain issues to a range of audiences
• Basic knowledge of contract law
• Capacity to work promote AVEVA's interests with a range of suppliers that have security issues or need to address risks
• Intermediate security knowledge including a working knowledge of ISO 27001 and NIST Cyber security framework
• Capacity to drive process management improvements, including design and application to standard operating procedures
• Good knowledge of procurement concepts, tools and processes
• Tenacity to drive improvements and enhancements to suppliers' security controls to mitigate risks identified to AVEVA through its supply base
• Experience of TPRM tooling such as Riskonnect
• Critical thinking skills to generate business value and to identify opportunities for improvements