Third Party Risk Analyst (Supplier Assurance)

Job Description - Third Party Risk Analyst (Supplier Assurance) (17236)

Job Description

Third Party Risk Analyst (Supplier Assurance) ( 17236 )

Description

Third Party Risk Analyst (Supplier Assurance)

We are easyJet – a FTSE listed, £multi-billion low-cost airline that serves tens of millions of customers every single year. If you’re reading this, you have probably already been an easyJet customer, and you’ll know that there is no more iconic (or Orange!) travel brand in Europe.

We fly more than 1,207 routes, connecting 38 countries across Europe, and employ more than 18,000 colleagues. We’re on a mission to make low-cost travel easy – and whatever your role here, you’ll connect millions of people to what they love using Europe’s best airline network, great value fares, and friendly service.

What makes us easyJet? Our Promise Behaviours - we are Safe, Bold, Welcoming and Challenging. Four Behaviours. One Spirit. One easyJet.

READ ON IF YOU

• Have experience in information security, IT audit, governance, risk and compliance, or supplier risk management.
• Enjoy analysing risk, engaging with stakeholders and helping drive meaningful improvements.
• Are confident communicating technical concepts to non-technical audiences.
• Thrive in a collaborative environment where you can influence positive outcomes across the business.
• Want to play a key role in protecting a complex and fast-moving digital landscape.

THE TEAM

Our Digital Safety team is made up of cyber security professionals dedicated to ensuring that Digital Safety is as embedded within easyJet as Aircraft Safety. Working closely with Operational, Commercial, Regulatory and Audit teams, we help safeguard the organisation from evolving digital risks.

This role works alongside the Supplier Resilience Lead, Senior Digital Safety Risk Manager, Head of Digital Safety Assurance and the wider Digital Safety team to strengthen our approach to supplier and third-party risk management.

THE ROLE

As a Third Party Risk Analyst (Supplier Assurance), you'll help assess, monitor and manage cyber and digital safety risks across easyJet’s supplier network. You'll work closely with internal stakeholders and external suppliers to identify risks, evaluate controls and support remediation activities, ensuring risks remain within our agreed appetite.

Key responsibilities include:

• Conducting third-party supplier risk assessments, including due diligence reviews, supplier questionnaires and risk analysis.
• Tracking and driving supplier assessments through the full assurance lifecycle.
• Engaging with suppliers to review findings and agree risk remediation activities.
• Supporting the ongoing development and improvement of easyJet’s third-party risk management framework.
• Reporting supplier risk insights and trends through appropriate governance forums.
• Supporting the management and escalation of unresolved supplier security risks.
• Partnering with supplier relationship managers to maintain visibility of supplier risk exposure.
• Working with subject matter experts to evaluate findings and develop remediation plans.
• Contributing to third-party risk documentation, processes and operational runbooks.
• Participating in supplier contract reviews and providing risk-based recommendations.
• Performing ongoing monitoring and reassessment of suppliers based on risk and oversight requirements.
• Supporting supplier prioritisation activities based on changing risk profiles.
• Contributing to risk metrics and KPIs that measure the effectiveness of the third-party risk programme.
• Supporting risk reporting, compliance activities and audit preparedness.
• Maintaining risk registers, exception registers and associated reporting.
• Facilitating meetings, documenting decisions and tracking associated actions.

Requirements of the Role

WHAT WE’RE LOOKING FOR

• A minimum of two years' experience within information security, IT audit, GRC or third-party risk management.
• Understanding of recognised security, compliance and risk frameworks such as ISO 27001, SOC 2, PCI-DSS and GDPR.
• Experience analysing technical documentation and assessing control effectiveness.
• Relevant information security or risk management qualifications, or equivalent knowledge and experience.
• Strong written and verbal communication skills with the ability to translate technical risks into business-focused messages.
• A proactive and organised approach to managing workload and priorities.
• Good analytical and problem-solving skills.
• Ability to build effective working relationships with a broad range of stakeholders.
• Experience producing reports and supporting governance activities.
• Commitment to continuous learning and developing subject matter expertise.
• A positive, collaborative and delivery-focused mindset.

WHAT YOU’LL GET IN RETURN

• Up to 20% maximum bonus
• 7% pension contributions
• Medical Cash Plan
• Excellent staff travel benefits
• 25 days of annual leave + bank holidays
• Annual credit towards an easyJet holiday
• Various flexible benefits and extras

PRACTICALITIES

This is a full-time position. We support hybrid working and spend time together as a team in our Luton HQ offices.

REASONABLE ADJUSTMENTS

At easyJet, we are dedicated to fostering an inclusive workplace that reflects the diverse customers we serve across Europe. We welcome candidates from all backgrounds. If you require specific adjustments or support during the application or recruitment process, such as extra time for assessments or accessible interview locations, please contact us at We are committed to providing reasonable adjustments throughout the recruitment process to ensure accessibility and accommodation.

#LI-CH1 #LI-HYBRID

Business Area

Legal

#J-18808-Ljbffr