Graduate Supply Chain Specialist

About the role

We are seeking a recent graduate to join our Information Security function as a Supply Chain Security Specialist. You will help manage and reduce risks associated with third‑party suppliers, protecting systems, data and client environments while gaining hands‑on experience in cyber security and third‑party risk management.

Key responsibilities

• Assess new and existing third‑party suppliers by reviewing their security controls and associated risks.
• Support procurement, commercial and project teams in understanding and managing supplier‑related cyber risks.
• Monitor supplier risk using tools such as Bitsight and produce clear, meaningful reports.
• Contribute to the development and improvement of supply chain security processes and policies.
• Identify opportunities to streamline ways of working and introduce automation.
• Support the response to supply chain‑related security incidents.

Required profile

• Interest in cyber security, information security or risk management.
• Awareness of risks relating to cloud services, SaaS and third‑party suppliers.
• Strong analytical and problem‑solving abilities.
• Effective communication with both technical and non‑technical stakeholders.
• Proactive mindset with a willingness to learn and develop.
• Ability to work collaboratively within a team environment.

Required skills

• Experience with Bitsight or similar supplier risk monitoring tools.
• Familiarity with security frameworks such as ISO 27001.
• Knowledge of Cyber Essentials and National Cyber Security Centre guidance.
• Understanding of data protection principles, including GDPR.

What we offer

• Strong career development opportunities and continuous learning.
• Hybrid working model – initial onsite presence in Hampshire with long‑term remote flexibility.
• Collaborative environment encouraging innovation and automation.