CyberVadis Consultant

About the role

We are seeking a CyberVadis Consultant to join our risk advisory team on a contract basis. You will work hybrid, spending two days a week onsite near Manchester, helping clients assess and improve their third‑party security posture.

Key responsibilities

• Conduct vendor assessments and audits, reviewing policies, ISMS documentation, and supplier risk profiles.
• Translate CyberVadis scorecards into actionable business risks and remediation plans.
• Liaise with legal, procurement, and supplier teams to drive security improvements.
• Align supplier metrics with international frameworks such as ISO 27001/2, NIST SP 800‑53, SOC 2 and GDPR.
• Enhance assessment models, monitor regulatory updates, and integrate threat intelligence into risk tiering.
• Provide advisory and technical guidance to vendors to improve their security posture.

Required profile

• 5+ years of experience in risk advisory, cybersecurity consulting, or third‑party risk management.
• Degree in Cybersecurity, IT, Computer Science or a related field.
• Strong stakeholder management and cross‑functional coordination skills.
• Relevant certifications such as ISO 27001 Lead Auditor, CISA, CISM, CompTIA Security+, GIAC or CyberVadis certification are preferred.

Required skills

• Expertise with the CyberVadis platform and third‑party risk portals.
• Deep knowledge of ISO 27001/2, NIST SP 800‑53, SOC 2 and GDPR frameworks.
• Experience conducting vendor audits and risk remediation.
• Proficiency in assessing compliance against international security standards.