Supplier Due Diligence Analyst (ESG) & Cyber Security

Support supplier qualification, onboarding, ongoing monitoring, and reassessment activities focusing on ESG, cyber security, and other supplier risk factors.

Use and implement supplier risk and cyber security monitoring tools (e.g., BitSight) to assess third-party cyber exposure, identify risks, and coordinate remediation actions.

Analyze supplier risk data and prepare reports, dashboards, and insights to support governance forums and enable risk-informed decision making.

Bachelor’s degree in supply chain management, Business Administration, Sustainability, Risk Management, Information Security, Finance, or related discipline.

5–8 years of experience in supplier risk management, due diligence, procurement, sustainability, compliance, cyber security, audit, or related fields.

Knowledge of ESG frameworks, supply chain due diligence, cyber security concepts (ISO 27001, NIS2, SOC reports, GDPR), and supplier lifecycle management.

Experience with supplier risk monitoring platforms; familiarity with BitSight or similar cyber risk intelligence tools preferred.

Experienced in managing supplier risk across multiple dimensions including ESG and cyber security within a global procurement environment.

Skilled in data analysis and reporting tools (Excel, Power BI) with the ability to translate complex supplier data into clear risk insights and actionable follow-ups.

Proficient in coordinating cross-functional teams (Procurement, Legal, Information Security) to enforce supplier risk remediation and compliance processes.