Supply Chain Security Specialist

Role Overview As Supply Chain Security Specialist, you will report to the Supply Chain Security Manager. You will be responsible for the operation, enforcement, and ongoing enhancement of supply chain security policies, processes, and standards, ensuring through close business collaboration, that suppliers comply with organisational, client, and regulatory security requirements. Using advanced monitoring and risk intelligence tooling, you will respond to the supply chain risks and emerging threats, enabling business stakeholders to understand, assess, and effectively respond to risks posed by suppliers and third parties to systems and information. You will also support and provide cover for the Supply Chain Security Manager in their absence. Key Responsibilities Review and Assessment of new Sopra Steria Third-Party Suppliers, and their Security Controls. Review and Assessment of existing Sopra Steria Third-Party Suppliers, and their Security Controls. Management, monitoring, development and maintenance of Supply Chain Security associated policies and processes. Support Project, commercial, and Procurement teams through the lifecycle of a Supplier relationship in understanding the InfoSec risks posed by Third-Party Suppliers. Proactively identify Process improvements and opportunities for automation in relation to Supply Chain Security associated processes. Maintain visibility and understanding of industry best practice, guidance, and standards in relation to Supply Chain Security and C-SCRM (Cyber Security Supply Chain Risk Management). Maintain visibility of the latest Cyber Threats which could impact Sopra Steria or its clients through an attack of the Supply Chain. Drive continuous improvement across the supply chain security function, adapting to emerging technologies and the evolving threat landscape. Support the response and management of supply chain-related cyber security incidents in line with the UK Security Incident Management process. Build and maintain strong relationships with key internal and external stakeholders to promote the importance and visibility of supplier assurance activities. Identify, document, and manage information security risks associated with third-party supplier engagement. Recommend and support the implementation of appropriate security controls and risk mitigation strategies across the supply chain. Undertake continued personal development to ensure knowledge and skills remain current and applicable to the role and teams’ function.