Third-Party Risk Management Officer

About the role

The Third-Party Risk Management Officer will join AVEVA’s Digital Security team to oversee supplier risk across the organisation. You will work in a fast‑paced environment, assessing new suppliers and ensuring they meet security and regulatory requirements.

Key responsibilities

• Manage and assess third‑party suppliers to identify security risks and issues.
• Communicate risks and remediation actions clearly to internal stakeholders and suppliers.
• Support external suppliers in improving their organisational and technical security measures.
• Help mature AVEVA’s third‑party risk processes and tooling.
• Perform data analysis, data entry and produce reports using TPRM tools.

Required profile

• Strong communication and engagement skills, able to explain issues to diverse audiences.
• Good knowledge of procurement concepts, tools and processes.
• Basic understanding of contract law.
• Intermediate security knowledge, including ISO 27001 and the NIST Cybersecurity Framework.
• Basic awareness of NIS 2 and EU CRA regulations.
• Ability to drive process‑management improvements and develop standard operating procedures.
• Capacity to promote AVEVA’s interests with suppliers that have security concerns.

Required skills

• ISO 27001
• NIST Cybersecurity Framework
• Riskonnect (TPRM tooling)