Role: Cyber Vadis Consultant

Location: UK (near Manchester), hybrid – 2 days onsite

Type: Contract (Inside IR35)

Must‑Have Skills

• Strong expertise with CyberVadis platform and third‑party risk portals

• 5+ years in risk advisory / cybersecurity consulting / third‑party risk management

• Degree in Cybersecurity, IT, or Computer Science

• Deep knowledge of ISO 27001/2, NIST SP 800‑53, SOC 2, GDPR

• Experience in vendor audits, risk remediation, and compliance frameworks

• Strong stakeholder management and cross‑functional coordination skills

Key Responsibilities

• Conduct vendor assessments & audits: review documents, policies, ISMS, and supplier risk profiles

• Translate CyberVadis scorecards into actionable business risks and remediation plans

• Liaise with legal, procurement, and supplier teams to drive security improvements

• Align supplier metrics with international frameworks (ISO, NIST, SOC 2, GDPR)

• Enhance assessment models, track regulatory updates, and integrate threat intelligence into risk tiering

• Provide advisory and technical guidance to vendors for improving security posture

Preferred Certifications

• ISO 27001 Lead Auditor / Implementer

• CISA, CISM, CompTIA Security+, GIAC

• CyberVadis certification