Candidates: Create an Account or Sign In
Candidates: Create an Account or Sign In
As our 3rd Party Cyber Security Risk Specialist, you'll be responsible for safeguarding critical business processes from cyber-attack disruptions, while ensuring the protection of customer and colleague data from unauthorised access or disclosure. Acting as the subject matter expert for Jet2's third-party ecosystem, you'll effectively manage associated cyber risks and support the wider business to help achieve overall business goals.
As our 3rd Party Cyber Security Risk Specialist, you'll have access to a wide range of benefits including:
Manager bonus
Hybrid working (we're in the office 2 days per week)
Colleague discounts on Jet2holidays and Jet2.com flights
At Jet2.com and Jet2holidays we're working together to deliver an amazing journey, literally! We work together to really drive forward a 'Customer First' ethos, creating unforgettable package holidays and flights. We couldn't do it without our wonderful people.
What you'll be doing:
Provide a resilient third-party risk management capability in accordance with best practices.
Be the point of contact for third-party risk including when onboarded or part of a project.
Support the supplier incident plan to increase visibility and knowledge to reduce possible impact.
Develop and coordinate the third-party risk management framework, policies and processes.
Coordinate the gathering of third-party risk assessment data, using tooling where possible.
Monitor, evaluate and continuously improve the third-party cyber risk management capability.
Provide specialised third-party focused security guidance and influence stakeholders.
What you'll have:
Experience of third-party cyber security risk management.
Demonstrates a strong understanding of complex third-party cyber risk-related issues.
Experienced in managing third-party cyber incidents.
Desirable qualifications include IT and business certifications such as ITIL, risk management, ISO standards, and GDPR. Additionally, security certifications like CISSP, CISM, CISA, ISO standards, and PCI DSS are highly valued.
#LI-Hybrid
