Third party risk manager

COMPANY DESCRIPTION

Tesco is a leading multinational retailer, with more than 336 000 colleagues.

Our software is used by millions of people across several countries every day. Whether it’s the tills and websites our customers use, or the systems our colleagues and partners use, you’ll play your part in keeping it running like a well-oiled machine. And when a business problem pops up? You and the creative minds in our team will be challenged to solve it.

As Tech Hub we cooperate within the group of Tesco Technology Hubs located in the UK, Poland, Czech Republic, Hungary, and India.

ABOUT THE ROLE

This is a fantastic opportunity to join Tesco’s Third Party Risk Management team, part of the wider Cyber Risk function. The Third Party Risk team provides assurance to Tesco by assessing the security risk and criticality of third party (supplier) organisations that store, access, or process Tesco data, or provide a critical service.

The job requires to be based in/close to Prague. We currently work in a hybrid model and meet in our office 3 days a week.

KEY RESPONSIBILITIES

• Work with suppliers to identify and remediate risks as required and furthermore identifying critical suppliers to Tesco
• Maintain an up-to-date record of all suppliers that access, store, process and provide critical services to Tesco, including the supplier assurance risk register
• Provide high quality risk reports, with guidance and recommendations, to enable senior business owners to make the most appropriate risk decisions relating to the use of the supplier
• Monitor on-going compliance of suppliers within set schedules depending on the risk profile of the supplier
• Work closely with the relevant business owners, legal and procurement to ensure third party risks are considered and managed at appropriate points of the supplier lifecycle
• Support Technology colleagues with queries relating to supplier assurance

EXPERIENCE RELEVANT FOR THIS JOB

• IT audit/risk management, with examples of managing technology risk and compliance within an organisation
• Knowledge of ISO standards in relation to information security and business continuity
• SME level expertise in respect to information security risk management processes, frameworks and procedures
• Leading, planning and conducting interviews with suppliers (or similar stakeholders) to obtain an understanding of the area being reviewed

SKILLS RELEVANT FOR THIS JOB

• Critical thinking with strong attention to detail and good organisational skills
• Strong written, verbal communication and presentation skills, working with all levels of seniority and disciplines within the organisation
• Able to build solid working relationships with peers as well as internal and external stakeholders
• At least one professional qualification such as CISA, CISM, CISSP or equivalent
• Fluent Czech/Slovak and English language knowledge

Unsure if you fit all the criteria? Apply and give us the chance to evaluate your potential – you could be the perfect fit!

ADDITIONAL INFORMATION

Benefits

Tesco is a diverse and exciting employer, dedicated to being #aplacetogeton, providing career-defining opportunities to all of our colleagues. If you choose to join our business, we will provide you with (for all):

• Permanent contract from the go - as a sign of our trust in your abilities
• Learning opportunities - certified technical training and learning platforms like Udemy, Pluralsight and O’Reilly
• Referral Bonus
• Up to 20% yearly salary bonus - based on both individual and business performance
• Cafeteria & Multisport
• Additional 5 days of paid leave to support your well-being and family life
• Shopping discount in our stores

If that sounds like something you’d like to be a part of, please get in touch!

Let us know you are interested by pushing the ANSWER button!

#LI-ACS1