> Markdown version of [/jobs/ext/2793880-cyber-risk-lead](https://www.wearedevelopers.com/jobs/ext/2793880-cyber-risk-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Risk Lead

- **Company:** CPS Group
- **Location:** UK
- **Experience:** Expert
- **Salary:** £90,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Power BI
- **Published:** September 8, 2026
- **Apply:** https://careers.cpsgroupuk.com/apply/86549/cyber-risk-lead

## About the Role

* Proven experience in Cyber Security / Information Security Risk, with a focus on third-party or vendor risk.
 * Strong experience designing, managing and improving vendor security due diligence processes.
 * Knowledge of vendor security assessments (ideally CSA STAR/CAIQ, SOC 2, and ISO 27001)
 * Experience working within a regulated industry and understanding relevant regulatory requirements.
 * Strong understanding of third-party cyber risk and the ability to communicate risks to both technical and non-technical stakeholders.
 * Experience with GRC / third-party risk management platforms is desirable.
 * Experience producing MI and dashboards, ideally using Power BI, is desirable.
 * Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 are advantageous.

## Description

This is a great opportunity for an experienced Cyber Security / Third-Party Risk professional to take ownership of a growing vendor risk function and work closely with IT, Procurement, Legal and senior stakeholders., * Own and continuously improve the third-party cyber risk and security due diligence process.

 * Lead vendor criticality assessments and ensure appropriate due diligence and ongoing monitoring.
 * Manage cyber risk requirements for critical and high-risk suppliers.
 * Ensure compliance with regulations including DORA, NIS2, PRA, FCA and GDPR.
 * Develop MI, dashboards and reporting for senior IT stakeholders and executives.
 * Provide cyber security guidance across vendor assessments, contracts and risk management.
 * Identify gaps and drive improvements across third-party cyber risk processes.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [REST, GraphQL, gRPC, and more: A comparison of modern API styles](https://www.wearedevelopers.com/videos/100247-rest-graphql-grpc-and-more-a-comparison-of-modern-api-styles)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)