Senior Supply Chain Controls Analyst

---

Job description

Job Opportunity: Supply Chain Controls Senior Analyst.

Salary: £44,000 - £61,500

Location: Warwick, UK

Sector: IT/IT Security.

I am currently conducting a search for a Senior Supply Chain Controls Analyst for an industry leading utilities company.

The successful candidate will be responsible for ensuring compliance with regulations and internal controls by performing supplier assurance evaluations, identifying control deficiencies, recommending improvements in internal control structure and conduct independent assessments of third parties/vendors

Key candidate Values:

• 3-5 years Risk Management, Audit or Assurance Experience in Information Security.
• Good Knowledge of 3rd Line Defense model for Risk Management.
• Good Communication skills; (both written and oral)
• Able to demonstrate credibility and influence senior stakeholders within the organisation.
• Self-motivated and Determined individual who has experience dealing with vendors and Suppliers.
• Procurement experience.

More in Depth Responsibilities include;

• Building knowledge of, establish and maintain good working relationships across IT, Security, Commercial, Procurement, Legal and supplier sponsors.
• Providing IT supply chain assurance support, advice and challenge for the Clients 1st line of defense functions prior to the contracting of services or products.
• Reviewing supplier responses to defined security questionnaires, identifying and quantifying areas of risk and potential vulnerability.
• Creating, Managing and maintaining Supplier profiles within the Clients Archer eGRC tool (SRM) ensuring security assurance artefacts, IT control test plans, findings and remediations are raised, managed, updated and resolved within an agreed timeframe.
• Facilitating root cause analysis and consultation on action plans with business owners and IT control owners based on the risks and remediations required to close out findings.

Technical:

• Background in Risk Management, Audit, Information Security or Compliance.
• Strong Interpersonal skills with ideally a customer facing.
• Building alignment that delivers outstanding teamwork.
• Demonstrable knowledge of industry standard, regulations, and methodologies (NIST, COBIT, ISO, Sox, GDPR)
• Understanding of SSAE 16, ISAE 3402